@lark-apaas/auth-sdk 0.1.3 → 0.1.5-alpha.0

package/lib/account/internal/trace-id.d.ts

@@ -0,0 +1,12 @@
+declare class TraceIdGenerator {
+    private static instance;
+    private counter;
+    private constructor();
+    static getInstance(): TraceIdGenerator;
+    next(): number;
+    getCurrent(): number;
+    reset(): void;
+}
+declare const traceIdGenerator: TraceIdGenerator;
+export { TraceIdGenerator, traceIdGenerator };
+//# sourceMappingURL=trace-id.d.ts.map

package/lib/account/internal/trace-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-id.d.ts","sourceRoot":"","sources":["../../../src/account/internal/trace-id.ts"],"names":[],"mappings":"AAAA,cAAM,gBAAgB;IACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAmB;IAC1C,OAAO,CAAC,OAAO,CAAa;IAE5B,OAAO;WAEO,WAAW,IAAI,gBAAgB;IAOtC,IAAI,IAAI,MAAM;IAId,UAAU,IAAI,MAAM;IAIpB,KAAK,IAAI,IAAI;CAGrB;AAED,QAAA,MAAM,gBAAgB,kBAAiC,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC"}

package/lib/account/internal/trace-id.js

@@ -0,0 +1,20 @@
+class TraceIdGenerator {
+    constructor(){
+        this.counter = 1;
+    }
+    static getInstance() {
+        if (!TraceIdGenerator.instance) TraceIdGenerator.instance = new TraceIdGenerator();
+        return TraceIdGenerator.instance;
+    }
+    next() {
+        return this.counter++;
+    }
+    getCurrent() {
+        return this.counter;
+    }
+    reset() {
+        this.counter = 1;
+    }
+}
+const traceIdGenerator = TraceIdGenerator.getInstance();
+export { TraceIdGenerator, traceIdGenerator };

package/lib/account/internal/types.d.ts

@@ -0,0 +1,46 @@
+export declare enum ServiceName {
+    DEFAULT = "default",
+    UserService = "user-service",
+    SessionService = "session-service"
+}
+export type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export type FetchMethod = 'GET' | 'HEAD' | 'POST' | 'PATCH' | 'DELETE';
+export type FetchOptions = {
+    method: FetchMethod;
+    body?: unknown;
+};
+export interface ExtraInfo {
+    psmName?: string;
+}
+export interface AccountServiceError {
+    code: number;
+    details: string;
+    hint: string | null;
+    message: string;
+}
+interface AccountServiceBase {
+    status: number;
+    statusText: string;
+}
+export interface AccountServiceSuccess<T> extends AccountServiceBase {
+    error: null;
+    data: T;
+}
+export interface AccountServiceFailure extends AccountServiceBase {
+    error: AccountServiceError;
+    data: null;
+}
+export type AccountServiceResponse<T> = AccountServiceSuccess<T> | AccountServiceFailure;
+export declare enum AccountStatus {
+    Unspecified = 0,
+    Inactive = 1,
+    Active = 2,
+    Disabled = 3,
+    Terminated = 4
+}
+export declare enum UserStatus {
+    active = 1,
+    inactive = 2
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/lib/account/internal/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/account/internal/types.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,OAAO,YAAY;IACnB,WAAW,iBAAiB;IAC5B,cAAc,oBAAoB;CACnC;AAED,MAAM,MAAM,KAAK,GAAG,CAClB,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEvE,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAE,SAAQ,kBAAkB;IAClE,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,KAAK,EAAE,mBAAmB,CAAC;IAC3B,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,IAChC,qBAAqB,CAAC,CAAC,CAAC,GACxB,qBAAqB,CAAC;AAG1B,oBAAY,aAAa;IACvB,WAAW,IAAI;IACf,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,UAAU,IAAI;CACf;AAGD,oBAAY,UAAU;IACpB,MAAM,IAAI;IACV,QAAQ,IAAI;CACb"}

package/lib/account/internal/types.js

@@ -0,0 +1,20 @@
+var types_ServiceName = /*#__PURE__*/ function(ServiceName) {
+    ServiceName["DEFAULT"] = "default";
+    ServiceName["UserService"] = "user-service";
+    ServiceName["SessionService"] = "session-service";
+    return ServiceName;
+}({});
+var types_AccountStatus = /*#__PURE__*/ function(AccountStatus) {
+    AccountStatus[AccountStatus["Unspecified"] = 0] = "Unspecified";
+    AccountStatus[AccountStatus["Inactive"] = 1] = "Inactive";
+    AccountStatus[AccountStatus["Active"] = 2] = "Active";
+    AccountStatus[AccountStatus["Disabled"] = 3] = "Disabled";
+    AccountStatus[AccountStatus["Terminated"] = 4] = "Terminated";
+    return AccountStatus;
+}({});
+var types_UserStatus = /*#__PURE__*/ function(UserStatus) {
+    UserStatus[UserStatus["active"] = 1] = "active";
+    UserStatus[UserStatus["inactive"] = 2] = "inactive";
+    return UserStatus;
+}({});
+export { types_AccountStatus as AccountStatus, types_ServiceName as ServiceName, types_UserStatus as UserStatus };

package/lib/account/services/session-service/index.d.ts

@@ -0,0 +1,34 @@
+import BaseAccountService from '../../BaseAccountService';
+import { type AccountServiceResponse, ServiceName } from '../../internal/types';
+import type { SignInRedirectionOptions, UserInfoResponse } from './types';
+export default class SessionService extends BaseAccountService {
+    serviceName: ServiceName;
+    /** Redirect to login page within app runtime environment. */
+    redirectToLogin(options?: SignInRedirectionOptions): AccountServiceResponse<'success'>;
+    /** Sign out current user session. */
+    signOut(): Promise<AccountServiceResponse<null>>;
+    /** Get current page URL with biz_source parameter */
+    getUrlWithBizSource(): string;
+    /** Gets the current user information if there is an existing session. */
+    getUserInfo(): Promise<AccountServiceResponse<UserInfoResponse>>;
+    /** Navigate to user profile page within app runtime environment. */
+    navigateToUserProfile(options?: {
+        newTab?: boolean;
+    }): {
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            hint: string;
+            details: string;
+        };
+        status: number;
+        statusText: string;
+    } | {
+        data: string;
+        error: null;
+        status: number;
+        statusText: string;
+    };
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/account/services/session-service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/account/services/session-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAG1D,OAAO,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAGV,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAcjB,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,kBAAkB;IACnD,WAAW,cAA8B;IAElD,6DAA6D;IAC7D,eAAe,CACb,OAAO,CAAC,EAAE,wBAAwB,GACjC,sBAAsB,CAAC,SAAS,CAAC;IAqCpC,qCAAqC;IAC/B,OAAO,IAAI,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAyBtD,qDAAqD;IACrD,mBAAmB,IAAI,MAAM;IAkB7B,yEAAyE;IACnE,WAAW,IAAI,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAqDtE,oEAAoE;IACpE,qBAAqB,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;CA+BrD"}

package/lib/account/services/session-service/index.js

@@ -0,0 +1,137 @@
+import BaseAccountService from "../../BaseAccountService.js";
+import { isBrowser } from "../../internal/helpers.js";
+import { reportAccountException } from "../../internal/slardar.js";
+import { ServiceName } from "../../internal/types.js";
+const browserEnvError = {
+    data: null,
+    error: {
+        code: 400,
+        message: 'Incompatible runtime environment',
+        hint: 'Please check if the current environment is browser.',
+        details: 'This method can only be invoked in browser environment.'
+    },
+    status: 400,
+    statusText: 'Bad Request'
+};
+class SessionService extends BaseAccountService {
+    redirectToLogin(options) {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'redirectToLogin',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.RedirectToLogin] authClient.session.redirectToLogin can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const { returnUrl, newTab = false } = options ?? {};
+        const encodedRedirectUrl = encodeURIComponent(decodeURIComponent(returnUrl || window.location.href));
+        const isSparkFaasPath = window.location.pathname.startsWith('/spark');
+        const baseLoginUrl = isSparkFaasPath ? `/spark/faas/${this.appId}/runtime/page/login` : `/app/${this.appId}/runtime/page/login`;
+        const loginPageUrl = `${baseLoginUrl}?biz_source=${this.bizSource}&redirect_uri=${encodedRedirectUrl}`;
+        if (newTab) window.open(loginPageUrl, '_blank');
+        else window.location.href = loginPageUrl;
+        return {
+            data: 'success',
+            error: null,
+            status: 200,
+            statusText: 'OK'
+        };
+    }
+    async signOut() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'signOut',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.SignOut] authClient.session.signOut can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const location = this.getUrlWithBizSource();
+        return this.fetchData('/af/runtime/api/v1/account/logout', {
+            method: 'POST',
+            body: {
+                appID: this.appId,
+                redirectURI: location
+            }
+        });
+    }
+    getUrlWithBizSource() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'getUrlWithBizSource',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.GetUrlWithBizSource] authClient.session.getUrlWithBizSource can only be invoked in browser environment.');
+            return '';
+        }
+        const currentUrl = new URL(window.location.href);
+        currentUrl.searchParams.set('biz_source', this.bizSource);
+        return currentUrl.toString();
+    }
+    async getUserInfo() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'getUserInfo',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.GetUserInfo] authClient.session.getUserInfo can only be invoked in browser environment.');
+            return Promise.resolve(browserEnvError);
+        }
+        const url = `/app/${this.appId}/__runtime__/api/v1/account/login/user`;
+        const urlObj = new URL(globalThis.location.href);
+        const pathSegments = urlObj.hostname.split('.');
+        const tenantDomainName = pathSegments[0] ?? '';
+        const response = await this.fetchData(url, {
+            method: 'POST',
+            body: {
+                appID: this.appId,
+                tenantDomainName
+            }
+        });
+        const userInfoResponse = {
+            data: {
+                user_info: {
+                    user_id: response.data?.userInfo?.userID,
+                    name: response.data?.userInfo?.name,
+                    avatar: response.data?.userInfo?.avatar,
+                    email: response.data?.userInfo?.email,
+                    phone_number: response.data?.userInfo?.desensitizedPhoneNumber
+                }
+            },
+            error: null,
+            status: response.status,
+            statusText: response.statusText
+        };
+        return userInfoResponse;
+    }
+    navigateToUserProfile(options) {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'navigateToUserProfile',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.NavigateToUserProfile] authClient.session.navigateToUserProfile can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const { newTab = false } = options ?? {};
+        const encodedReturnUrl = encodeURIComponent(window.location.href);
+        const profilePageUrl = `/suda/user?brand=${this.brandId}&returnUrl=${encodedReturnUrl}&appId=${this.appId}`;
+        if (newTab) window.open(profilePageUrl, '_blank');
+        else window.location.href = profilePageUrl;
+        return {
+            data: 'success',
+            error: null,
+            status: 200,
+            statusText: 'OK'
+        };
+    }
+    constructor(...args){
+        super(...args), this.serviceName = ServiceName.SessionService;
+    }
+}
+export { SessionService as default };

package/lib/account/services/session-service/types.d.ts

@@ -0,0 +1,30 @@
+export interface I18n {
+    language_code: number;
+    text: string;
+}
+export type I18ns = I18n[];
+export interface Avatar {
+    source?: string;
+    image?: {
+        large?: string;
+    };
+    color?: string;
+}
+export interface SignInRedirectionOptions {
+    /** The URL to redirect to after a successful login. Defaults to the current URL. */
+    returnUrl?: string;
+    /** Whether to open the login page in a new tab. Defaults to `false`. */
+    newTab?: boolean;
+}
+export interface UserBaseInfo {
+    user_id?: number;
+    name?: I18ns;
+    avatar?: Avatar;
+    email?: string;
+    phone_number?: string;
+    tenant_name?: string;
+}
+export interface UserInfoResponse {
+    user_info?: UserBaseInfo;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/account/services/session-service/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/account/services/session-service/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,IAAI;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;AAE3B,MAAM,WAAW,MAAM;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B"}

package/lib/account/services/user-service/index.d.ts

@@ -0,0 +1,9 @@
+import BaseAccountService from '../../BaseAccountService';
+import { type AccountServiceResponse, ServiceName } from '../../internal/types';
+import type { SearchParams, UserResponse } from './types';
+export default class UserService extends BaseAccountService {
+    serviceName: ServiceName;
+    search(params: SearchParams): Promise<AccountServiceResponse<UserResponse>>;
+    getByIds(ids: string[] | number[]): Promise<AccountServiceResponse<UserResponse>>;
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/account/services/user-service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/account/services/user-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,kBAAkB;IAChD,WAAW,cAA2B;IAEzC,MAAM,CACV,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAqC1C,QAAQ,CACZ,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GACvB,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;CAkCjD"}

package/lib/account/services/user-service/index.js

@@ -0,0 +1,60 @@
+import BaseAccountService from "../../BaseAccountService.js";
+import { convertUserStatus, retrieveNameFromI18n } from "../../internal/helpers.js";
+import { ServiceName } from "../../internal/types.js";
+class UserService extends BaseAccountService {
+    async search(params) {
+        const { name, pageSize } = params;
+        const res = await this.fetchData(`/app/${this.appId}/__runtime__/api/v1/account/search_user`, {
+            method: 'POST',
+            body: {
+                query: name,
+                page_size: pageSize
+            }
+        }, {
+            psmName: 'UserService.Search'
+        });
+        if (res.error) return res;
+        return {
+            ...res,
+            data: {
+                user_list: res.data?.userList?.map((item)=>({
+                        avatar: item.avatar ?? '',
+                        email: item.email ?? '',
+                        name: retrieveNameFromI18n(item.name) ?? '',
+                        status: convertUserStatus(item.userStatus),
+                        user_id: item.userID ?? ''
+                    })) ?? []
+            }
+        };
+    }
+    async getByIds(ids) {
+        const res = await this.fetchData(`/app/${this.appId}/__runtime__/api/v1/account/list_users`, {
+            method: 'POST',
+            body: {
+                userIDList: ids
+            }
+        }, {
+            psmName: 'UserService.GetByIds'
+        });
+        if (res.error) return res;
+        return {
+            ...res,
+            data: {
+                user_list: ids.map((id)=>{
+                    const item = res.data?.userInfoMap?.[id];
+                    return {
+                        avatar: item?.avatar?.image?.large ?? '',
+                        email: item?.email ?? '',
+                        name: retrieveNameFromI18n(item?.name) ?? '',
+                        status: convertUserStatus(item?.userStatus),
+                        user_id: item?.userID ? String(item.userID) : ''
+                    };
+                })
+            }
+        };
+    }
+    constructor(...args){
+        super(...args), this.serviceName = ServiceName.UserService;
+    }
+}
+export { UserService as default };

package/lib/account/services/user-service/types.d.ts

@@ -0,0 +1,51 @@
+import type { AccountStatus, UserStatus } from '../../internal/types';
+export type I18n = {
+    zh_cn: string;
+    en_us: string;
+    ja_jp: string;
+};
+export type SearchParams = {
+    name: string;
+    pageSize?: number;
+};
+export type User = {
+    user_id: string;
+    email: string;
+    name: string;
+    avatar: string;
+    status: UserStatus;
+};
+export type DepartmentEntity = {
+    departmentID: string;
+    larkDepartmentID: string;
+    name: I18n;
+};
+export type SearchUserEntity = {
+    userID: string;
+    larkUserID: string;
+    name: I18n;
+    avatar: string;
+    userType: string;
+    email: string;
+    userStatus: AccountStatus;
+    department: DepartmentEntity;
+};
+export type GetByIdUserEntity = {
+    userID: number;
+    larkUserID: number;
+    name: I18n;
+    avatar: {
+        source: string;
+        image?: {
+            large: string;
+        };
+    };
+    userType: string;
+    email: string;
+    userStatus: AccountStatus;
+    department: DepartmentEntity;
+};
+export type UserResponse = {
+    user_list: User[];
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/account/services/user-service/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/account/services/user-service/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE;YACN,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,IAAI,EAAE,CAAC;CACnB,CAAC"}

package/lib/index.d.ts

@@ -1,13 +1,18 @@
 /**
  * @lark-apaas/auth-sdk
  *
- * 基于 CASL 的前端鉴权 SDK
- * 封装了权限数据获取和 Ability 初始化逻辑
+ * 妙搭账户与鉴权 SDK：
+ * - 基于 CASL 的前端权限点鉴权（PermissionClient / AuthProvider / useCan）
+ * - 账户与会话能力（user / session services） — 见 ./account
  */
-export type { PermissionApiResponse, PermissionApiConfig, AuthSdkConfig, } from './types';
+export type { PermissionApiResponse, PermissionApiConfig, PermissionPointData, AuthSdkConfig, } from './types';
 export { ROLE_SUBJECT } from './ability-factory';
 export { PermissionClient } from './permission-client';
-export { AuthProvider, useAuth, CanRole, AbilityContext, useUserPermissions, useCanPermission, CanPermission, } from './AuthProvider';
-export { CanPermission as CanPerm } from './AuthProvider';
+export { AuthProvider, useAuth, Can, CanRole, useCan, AbilityContext, useUserPermissions, } from './AuthProvider';
 export type { AuthProviderProps } from './AuthProvider';
+export { AccountClient } from './account';
+export type { AccountServiceResponse, AccountServiceError, SearchParams, User, UserResponse, SignInRedirectionOptions, UserBaseInfo, UserInfoResponse, Avatar, } from './account';
+export { AccountStatus, UserStatus } from './account/internal/types';
+import { AccountClient } from './account';
+export declare const authClient: AccountClient;
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EACL,YAAY,EACZ,OAAO,EACP,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE1D,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EACL,YAAY,EACZ,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,cAAc,EACd,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,IAAI,EACJ,YAAY,EACZ,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,MAAM,GACP,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,eAAO,MAAM,UAAU,eAAsB,CAAC"}

package/lib/index.js

@@ -1,4 +1,7 @@
 import { ROLE_SUBJECT } from "./ability-factory.js";
 import { PermissionClient } from "./permission-client.js";
-import { AbilityContext, AuthProvider, CanPermission, CanRole, useAuth, useCanPermission, useUserPermissions } from "./AuthProvider.js";
-export { AbilityContext, AuthProvider, CanPermission as CanPerm, CanPermission, CanRole, PermissionClient, ROLE_SUBJECT, useAuth, useCanPermission, useUserPermissions };
+import { AbilityContext, AuthProvider, Can, CanRole, useAuth, useCan, useUserPermissions } from "./AuthProvider.js";
+import { AccountClient } from "./account/index.js";
+import { AccountStatus, UserStatus } from "./account/internal/types.js";
+const authClient = new AccountClient();
+export { AbilityContext, AccountClient, AccountStatus, AuthProvider, Can, CanRole, PermissionClient, ROLE_SUBJECT, UserStatus, authClient, useAuth, useCan, useUserPermissions };

package/lib/permission-client.d.ts

@@ -1,4 +1,4 @@
-import type { PermissionApiConfig, PermissionApiResponse } from './types';
+import type { PermissionApiConfig, PermissionApiResponse, PermissionPointData } from './types';
 /**
  * 权限数据获取客户端
  */
@@ -10,9 +10,10 @@ export declare class PermissionClient {
      */
     fetchPermissions(): Promise<PermissionApiResponse>;
     /**
-     * 获取用户权限点位列表
+     * 获取用户权限点位
+     * 请求内置的权限点位查询端点
      */
-    fetchUserPermissions(config: PermissionApiConfig): Promise<string[]>;
+    static fetchPermissionPoints(): Promise<PermissionPointData[]>;
     /**
      * 更新配置
      */

package/lib/permission-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-client.d.ts","sourceRoot":"","sources":["../src/permission-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAG1E;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB;IAIvC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAoDxD;;OAEG;IACG,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA4C1E;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI;IAOxD;;OAEG;IACH,SAAS,IAAI,mBAAmB;CAGjC"}
+{"version":3,"file":"permission-client.d.ts","sourceRoot":"","sources":["../src/permission-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAG/F;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB;IAIvC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAqDxD;;;OAGG;WACU,qBAAqB,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAwCpE;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI;IAOxD;;OAEG;IACH,SAAS,IAAI,mBAAmB;CAGjC"}

package/lib/permission-client.js

@@ -42,29 +42,37 @@ class PermissionClient {
             throw error;
         }
     }
-    async fetchUserPermissions(config) {
-        const { url, timeout = 5000, headers = {} } = config;
-        const requestHeaders = {
-            ...headers,
-            'Content-Type': 'application/json',
-            'X-Suda-Csrf-Token': window.csrfToken || ''
-        };
+    static async fetchPermissionPoints() {
+        const appId = window.appId || '';
+        const url = `/app/${appId}/api/sdk_innerapi/permission/user-points`;
         const controller = new AbortController();
-        const timeoutId = setTimeout(()=>controller.abort(), timeout);
+        const timeoutId = setTimeout(()=>controller.abort(), 5000);
         try {
             const response = await fetch(url, {
-                method: 'POST',
-                headers: requestHeaders,
+                method: 'GET',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-Suda-Csrf-Token': window.csrfToken || ''
+                },
                 signal: controller.signal,
                 credentials: 'include'
             });
             clearTimeout(timeoutId);
-            if (!response.ok) throw new Error(`Permissions API returned ${response.status}: ${response.statusText}`);
-            const data = await response.json();
-            return data.data?.permissions || [];
+            if (!response.ok) throw new Error(`Permission Points API returned ${response.status}: ${response.statusText}`);
+            return await response.json();
         } catch (error) {
             clearTimeout(timeoutId);
-            if (error instanceof Error && 'AbortError' === error.name) throw new Error(`Permissions API request timeout after ${timeout}ms`);
+            if (error instanceof Error && 'AbortError' === error.name) {
+                slardar.captureException(error, {
+                    source: 'auth-sdk',
+                    type: 'timeout'
+                });
+                throw new Error('Permission Points API request timeout');
+            }
+            slardar.captureException(error, {
+                source: 'auth-sdk',
+                type: 'fetch'
+            });
             throw error;
         }
     }

package/lib/types.d.ts

@@ -14,13 +14,14 @@ export type Action = 'create' | 'read' | 'update' | 'delete' | 'manage' | string
  */
 export type Subject = string;
 /**
- * 单个权限定义
+ * 权限点位数据（action + subject 分离模式）
+ * 由内置 user-points 端点返回，注册到 CASL Ability
  */
-export interface Permission {
-    id: string;
-    name: string;
-    sub: Subject;
-    actions: Action[];
+export interface PermissionPointData {
+    id?: string;
+    action: string;
+    subject: string;
+    description?: string;
 }
 /**
  * 用户角色定义
@@ -65,11 +66,6 @@ export interface AuthSdkConfig {
      * 权限 API 配置
      */
     permissionApi?: PermissionApiConfig;
-    /**
-     * 权限点位 API 配置（可选）
-     * 配置后 AuthProvider 会额外请求用户的有效权限点位
-     */
-    permissionPointsApi?: PermissionApiConfig;
     /**
      * 是否在初始化时使用获取权限
      * @default false

package/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;CACF;AAED;;GAEG;AACH,MAAM,MAAM,MAAM,GACd,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;CACF;AAED;;GAEG;AACH,MAAM,MAAM,MAAM,GACd,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lark-apaas/auth-sdk",
-  "version": "0.1.3",
-  "description": "基于 CASL 的前端鉴权 SDK",
+  "version": "0.1.5-alpha.0",
+  "description": "妙搭账户与鉴权 SDK：CASL 权限点 + 账户/会话能力",
   "types": "./lib/index.d.ts",
   "main": "./lib/index.js",
   "module": "./lib/index.js",