@lark-apaas/auth-sdk 0.1.4 → 0.1.5-alpha.0

package/lib/account/AccountClient.d.ts

@@ -0,0 +1,22 @@
+import SessionService from './services/session-service';
+import UserService from './services/user-service';
+/**
+ * 妙搭账户/会话能力 SDK，零参构造。
+ *
+ * 业务调用方应通过 `authClient` singleton 使用（见 src/index.ts）：
+ *   import { authClient } from '@lark-apaas/auth-sdk';
+ *   await authClient.user.search({ name: '张三' });
+ *
+ * 直接 `new AccountClient()` 仅用于测试或特殊场景（多实例隔离）。
+ *
+ * 构造行为：
+ * - `appId` 从 `globalThis.appId` 读取（与现有 toolkit 的 `getAppId()` 一致）
+ * - HTTP 走相对路径 + `credentials: 'include'`，使用浏览器本域 session cookie
+ * - 不接受任何外部配置（baseUrl/token/brandName/fetch/log/errorHook 全部内化或默认化）
+ */
+export declare class AccountClient {
+    readonly user: UserService;
+    readonly session: SessionService;
+    constructor();
+}
+//# sourceMappingURL=AccountClient.d.ts.map

package/lib/account/AccountClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountClient.d.ts","sourceRoot":"","sources":["../../src/account/AccountClient.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAElD;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAa;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;;CAOlC"}

package/lib/account/AccountClient.js

@@ -0,0 +1,10 @@
+import session_service from "./services/session-service/index.js";
+import user_service from "./services/user-service/index.js";
+class AccountClient {
+    constructor(){
+        const appId = globalThis.appId ?? '';
+        this.user = new user_service(appId);
+        this.session = new session_service(appId);
+    }
+}
+export { AccountClient };

package/lib/account/BaseAccountService.d.ts

@@ -0,0 +1,25 @@
+import { type AccountServiceResponse, type ExtraInfo, type Fetch, type FetchOptions, ServiceName } from './internal/types';
+/**
+ * Base for AC services. Owns the fetch pipeline:
+ * - Injects X-Suda-Csrf-Token from cookie
+ * - Sends body as JSON with credentials: 'include' (session cookie auth)
+ * - Normalizes responses into AccountServiceResponse<T>
+ * - Logs requests/responses in development
+ *
+ * 不暴露 baseUrl/token/brandName/fetch 参数（C5 二轮评审决议）。
+ */
+export default abstract class BaseAccountService {
+    protected baseUrl: string;
+    protected headers: {
+        [key: string]: string;
+    };
+    protected fetch: Fetch;
+    protected logger: boolean;
+    protected serviceName: ServiceName;
+    protected brandId: string;
+    protected bizSource: string;
+    protected appId: string;
+    constructor(appId: string);
+    fetchData<T>(url: string, options: FetchOptions, extras?: ExtraInfo): Promise<AccountServiceResponse<T>>;
+}
+//# sourceMappingURL=BaseAccountService.d.ts.map

package/lib/account/BaseAccountService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAccountService.d.ts","sourceRoot":"","sources":["../../src/account/BaseAccountService.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,SAAS,EACd,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;GAQG;AACH,MAAM,CAAC,OAAO,CAAC,QAAQ,OAAO,kBAAkB;IAC9C,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,OAAO,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;IACnC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEZ,KAAK,EAAE,MAAM;IAenB,SAAS,CAAC,CAAC,EACf,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;CA8GtC"}

package/lib/account/BaseAccountService.js

@@ -0,0 +1,106 @@
+import { BIZ_SOURCE, BRAND_ID } from "./internal/brand.js";
+import { getCookieByName } from "./internal/helpers.js";
+import { logRequest, logResponse } from "./internal/logger.js";
+import { traceIdGenerator } from "./internal/trace-id.js";
+import { ServiceName } from "./internal/types.js";
+class BaseAccountService {
+    constructor(appId){
+        this.baseUrl = 'undefined' != typeof window ? window.location.origin : '';
+        this.headers = {
+            'X-Suda-Csrf-Token': getCookieByName('suda-csrf-token'),
+            'Content-Type': 'application/json'
+        };
+        this.logger = 'production' !== process.env.NODE_ENV;
+        this.serviceName = ServiceName.DEFAULT;
+        this.brandId = BRAND_ID;
+        this.bizSource = BIZ_SOURCE;
+        this.appId = appId;
+        this.fetch = globalThis.fetch.bind(globalThis);
+    }
+    async fetchData(url, options, extras) {
+        const fetchUrl = `${this.baseUrl}${url}`;
+        let traceId = -1;
+        if (this.logger) {
+            traceId = traceIdGenerator.next();
+            logRequest({
+                traceId,
+                url: fetchUrl,
+                method: options.method,
+                body: options.body
+            }, extras?.psmName);
+        }
+        try {
+            const res = await this.fetch(fetchUrl, {
+                method: options.method,
+                mode: 'cors',
+                redirect: 'manual',
+                credentials: 'include',
+                headers: this.headers,
+                body: JSON.stringify(options.body)
+            });
+            let error = null;
+            let data = null;
+            let status = res.status;
+            let statusText = res.statusText;
+            if (res.ok) {
+                const body = await res.text();
+                const parsedBody = JSON.parse(body);
+                if (parsedBody.status_code && parsedBody.error_msg) {
+                    data = null;
+                    error = {
+                        code: parsedBody.status_code || res.status,
+                        details: '',
+                        hint: '',
+                        message: parsedBody.error_msg || body
+                    };
+                } else {
+                    data = parsedBody.data;
+                    error = null;
+                }
+            } else {
+                const body = await res.text();
+                let parsedBody = {};
+                try {
+                    parsedBody = JSON.parse(body);
+                } catch  {}
+                error = 429 === res.status ? {
+                    code: 429,
+                    message: 'Too many requests received within 5 seconds.',
+                    details: '',
+                    hint: 'Retry after 5 seconds.'
+                } : {
+                    code: parsedBody.status_code || res.status,
+                    message: parsedBody.error_msg || body,
+                    details: '',
+                    hint: ''
+                };
+            }
+            const serviceResponse = {
+                data,
+                error,
+                status,
+                statusText
+            };
+            if (this.logger) logResponse(traceId, serviceResponse, extras?.psmName);
+            return serviceResponse;
+        } catch (e) {
+            const internalError = {
+                error: {
+                    code: 500,
+                    message: e instanceof Error ? e.message : String(e),
+                    details: '',
+                    hint: ''
+                },
+                status: 500,
+                statusText: 'Account Internal Error'
+            };
+            const serviceResponse = {
+                data: null,
+                ...internalError
+            };
+            if (this.logger) logResponse(traceId, serviceResponse, extras?.psmName);
+            return serviceResponse;
+        }
+    }
+}
+export { BaseAccountService as default };

package/lib/account/index.d.ts

@@ -0,0 +1,5 @@
+export { AccountClient } from './AccountClient';
+export type { AccountServiceResponse, AccountServiceError, AccountStatus, UserStatus, } from './internal/types';
+export type { SearchParams, User, UserResponse, I18n as UserI18n, } from './services/user-service/types';
+export type { SignInRedirectionOptions, UserBaseInfo, UserInfoResponse, Avatar, I18n as SessionI18n, I18ns as SessionI18ns, } from './services/session-service/types';
+//# sourceMappingURL=index.d.ts.map

package/lib/account/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,aAAa,EACb,UAAU,GACX,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,YAAY,EACZ,IAAI,EACJ,YAAY,EACZ,IAAI,IAAI,QAAQ,GACjB,MAAM,+BAA+B,CAAC;AAGvC,YAAY,EACV,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,MAAM,EACN,IAAI,IAAI,WAAW,EACnB,KAAK,IAAI,YAAY,GACtB,MAAM,kCAAkC,CAAC"}

package/lib/account/index.js

@@ -0,0 +1,2 @@
+import { AccountClient } from "./AccountClient.js";
+export { AccountClient };

package/lib/account/internal/brand.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 妙搭 (Miaoda) brand constants — hard-coded after C5 review.
+ * 历史上 `brandName` 是参数，serializeSessionBrandId('miaoda') === '1'。
+ * 现 auth-sdk 仅服务妙搭场景，相关常量直接内化。
+ */
+export declare const BIZ_SOURCE = "miaoda";
+export declare const BRAND_ID = "1";
+//# sourceMappingURL=brand.d.ts.map

package/lib/account/internal/brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../../../src/account/internal/brand.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,QAAQ,MAAM,CAAC"}

package/lib/account/internal/brand.js

@@ -0,0 +1,3 @@
+const BIZ_SOURCE = 'miaoda';
+const BRAND_ID = '1';
+export { BIZ_SOURCE, BRAND_ID };

package/lib/account/internal/helpers.d.ts

@@ -0,0 +1,7 @@
+import { AccountStatus, UserStatus } from './types';
+import type { I18n } from '../services/user-service/types';
+export declare const isBrowser: () => boolean;
+export declare const getCookieByName: (name: string) => string;
+export declare const retrieveNameFromI18n: (i18ns?: I18n) => string;
+export declare const convertUserStatus: (status?: AccountStatus) => UserStatus;
+//# sourceMappingURL=helpers.d.ts.map

package/lib/account/internal/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/account/internal/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAE3D,eAAO,MAAM,SAAS,eAC4C,CAAC;AAEnE,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,KAAG,MAW9C,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,QAAQ,IAAI,WAEhD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,SAAS,aAAa,KAAG,UAY1D,CAAC"}

package/lib/account/internal/helpers.js

@@ -0,0 +1,14 @@
+import { AccountStatus, UserStatus } from "./types.js";
+const isBrowser = ()=>'undefined' != typeof window && 'undefined' != typeof document;
+const getCookieByName = (name)=>{
+    if (!isBrowser()) return '';
+    const cookies = document.cookie.split(';');
+    return cookies.find((cookie)=>cookie.trim().startsWith(`${name}=`))?.split('=')[1] ?? '';
+};
+const retrieveNameFromI18n = (i18ns)=>i18ns?.zh_cn || i18ns?.en_us || i18ns?.ja_jp || '';
+const convertUserStatus = (status)=>{
+    if (status === AccountStatus.Active || status === AccountStatus.Inactive) return UserStatus.active;
+    if (status === AccountStatus.Disabled || status === AccountStatus.Terminated) return UserStatus.inactive;
+    return UserStatus.active;
+};
+export { convertUserStatus, getCookieByName, isBrowser, retrieveNameFromI18n };

package/lib/account/internal/logger.d.ts

@@ -0,0 +1,15 @@
+import type { FetchMethod } from './types';
+type LogParams = {
+    traceId: number;
+    url: string;
+    method: FetchMethod;
+    body?: unknown;
+};
+export declare const logRequest: (params: LogParams, psmName?: string) => void;
+export declare const logResponse: (traceId: number, response: {
+    data: unknown;
+    error: unknown;
+    status: number;
+}, psmName?: string) => void;
+export {};
+//# sourceMappingURL=logger.d.ts.map

package/lib/account/internal/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/account/internal/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,KAAK,SAAS,GAAG;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,QAAQ,SAAS,EAAE,UAAS,MAAkB,SAuBxE,CAAC;AAEF,eAAO,MAAM,WAAW,GACtB,SAAS,MAAM,EACf,UAAU;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC3D,UAAS,MAAkB,SA0B5B,CAAC"}

package/lib/account/internal/logger.js

@@ -0,0 +1,18 @@
+const logRequest = (params, psmName = 'Service')=>{
+    const { traceId, url, method, body } = params;
+    const decodedParams = Array.from(new URL(url, 'http://temp.invalid').searchParams.entries()).filter(([key])=>![
+            'count',
+            'tx',
+            'missing',
+            'resolution',
+            'column'
+        ].includes(key)).map(([key, value])=>`${key}=${value}`);
+    console.log(`[Account][${psmName}][Request]`, 'trace id:', traceId, 'method:', method, 'params:', decodedParams.join(','), 'body:', body);
+};
+const logResponse = (traceId, response, psmName = 'Service')=>{
+    const { data, error, status } = response;
+    const hasError = !!error;
+    if (hasError) console.error(`[Account][${psmName}][Response Failed]`, 'trace id:', traceId, 'statusCode:', status, 'error:', error);
+    else console.log(`[Account][${psmName}][Response Success]`, 'trace id:', traceId, 'statusCode:', status, 'data:', data);
+};
+export { logRequest, logResponse };

package/lib/account/internal/slardar.d.ts

@@ -0,0 +1,2 @@
+export declare const reportAccountException: (error: unknown, extra: Record<string, unknown>) => void;
+//# sourceMappingURL=slardar.d.ts.map

package/lib/account/internal/slardar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slardar.d.ts","sourceRoot":"","sources":["../../../src/account/internal/slardar.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,sBAAsB,GACjC,OAAO,OAAO,EACd,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAa/B,CAAC"}

package/lib/account/internal/slardar.js

@@ -0,0 +1,16 @@
+import { slardar } from "@lark-apaas/internal-slardar";
+const toRecordString = (record)=>Object.fromEntries(Object.entries(record).filter(([, value])=>null != value).map(([key, value])=>[
+            key,
+            String(value)
+        ]));
+const reportAccountException = (error, extra)=>{
+    try {
+        const categories = toRecordString({
+            source: 'auth-sdk',
+            module: 'account',
+            ...extra
+        });
+        slardar.captureException(error, categories);
+    } catch  {}
+};
+export { reportAccountException };

package/lib/account/internal/trace-id.d.ts

@@ -0,0 +1,12 @@
+declare class TraceIdGenerator {
+    private static instance;
+    private counter;
+    private constructor();
+    static getInstance(): TraceIdGenerator;
+    next(): number;
+    getCurrent(): number;
+    reset(): void;
+}
+declare const traceIdGenerator: TraceIdGenerator;
+export { TraceIdGenerator, traceIdGenerator };
+//# sourceMappingURL=trace-id.d.ts.map

package/lib/account/internal/trace-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-id.d.ts","sourceRoot":"","sources":["../../../src/account/internal/trace-id.ts"],"names":[],"mappings":"AAAA,cAAM,gBAAgB;IACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAmB;IAC1C,OAAO,CAAC,OAAO,CAAa;IAE5B,OAAO;WAEO,WAAW,IAAI,gBAAgB;IAOtC,IAAI,IAAI,MAAM;IAId,UAAU,IAAI,MAAM;IAIpB,KAAK,IAAI,IAAI;CAGrB;AAED,QAAA,MAAM,gBAAgB,kBAAiC,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC"}

package/lib/account/internal/trace-id.js

@@ -0,0 +1,20 @@
+class TraceIdGenerator {
+    constructor(){
+        this.counter = 1;
+    }
+    static getInstance() {
+        if (!TraceIdGenerator.instance) TraceIdGenerator.instance = new TraceIdGenerator();
+        return TraceIdGenerator.instance;
+    }
+    next() {
+        return this.counter++;
+    }
+    getCurrent() {
+        return this.counter;
+    }
+    reset() {
+        this.counter = 1;
+    }
+}
+const traceIdGenerator = TraceIdGenerator.getInstance();
+export { TraceIdGenerator, traceIdGenerator };

package/lib/account/internal/types.d.ts

@@ -0,0 +1,46 @@
+export declare enum ServiceName {
+    DEFAULT = "default",
+    UserService = "user-service",
+    SessionService = "session-service"
+}
+export type Fetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export type FetchMethod = 'GET' | 'HEAD' | 'POST' | 'PATCH' | 'DELETE';
+export type FetchOptions = {
+    method: FetchMethod;
+    body?: unknown;
+};
+export interface ExtraInfo {
+    psmName?: string;
+}
+export interface AccountServiceError {
+    code: number;
+    details: string;
+    hint: string | null;
+    message: string;
+}
+interface AccountServiceBase {
+    status: number;
+    statusText: string;
+}
+export interface AccountServiceSuccess<T> extends AccountServiceBase {
+    error: null;
+    data: T;
+}
+export interface AccountServiceFailure extends AccountServiceBase {
+    error: AccountServiceError;
+    data: null;
+}
+export type AccountServiceResponse<T> = AccountServiceSuccess<T> | AccountServiceFailure;
+export declare enum AccountStatus {
+    Unspecified = 0,
+    Inactive = 1,
+    Active = 2,
+    Disabled = 3,
+    Terminated = 4
+}
+export declare enum UserStatus {
+    active = 1,
+    inactive = 2
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/lib/account/internal/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/account/internal/types.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,OAAO,YAAY;IACnB,WAAW,iBAAiB;IAC5B,cAAc,oBAAoB;CACnC;AAED,MAAM,MAAM,KAAK,GAAG,CAClB,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEvE,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAE,SAAQ,kBAAkB;IAClE,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,KAAK,EAAE,mBAAmB,CAAC;IAC3B,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,IAChC,qBAAqB,CAAC,CAAC,CAAC,GACxB,qBAAqB,CAAC;AAG1B,oBAAY,aAAa;IACvB,WAAW,IAAI;IACf,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,UAAU,IAAI;CACf;AAGD,oBAAY,UAAU;IACpB,MAAM,IAAI;IACV,QAAQ,IAAI;CACb"}

package/lib/account/internal/types.js

@@ -0,0 +1,20 @@
+var types_ServiceName = /*#__PURE__*/ function(ServiceName) {
+    ServiceName["DEFAULT"] = "default";
+    ServiceName["UserService"] = "user-service";
+    ServiceName["SessionService"] = "session-service";
+    return ServiceName;
+}({});
+var types_AccountStatus = /*#__PURE__*/ function(AccountStatus) {
+    AccountStatus[AccountStatus["Unspecified"] = 0] = "Unspecified";
+    AccountStatus[AccountStatus["Inactive"] = 1] = "Inactive";
+    AccountStatus[AccountStatus["Active"] = 2] = "Active";
+    AccountStatus[AccountStatus["Disabled"] = 3] = "Disabled";
+    AccountStatus[AccountStatus["Terminated"] = 4] = "Terminated";
+    return AccountStatus;
+}({});
+var types_UserStatus = /*#__PURE__*/ function(UserStatus) {
+    UserStatus[UserStatus["active"] = 1] = "active";
+    UserStatus[UserStatus["inactive"] = 2] = "inactive";
+    return UserStatus;
+}({});
+export { types_AccountStatus as AccountStatus, types_ServiceName as ServiceName, types_UserStatus as UserStatus };

package/lib/account/services/session-service/index.d.ts

@@ -0,0 +1,34 @@
+import BaseAccountService from '../../BaseAccountService';
+import { type AccountServiceResponse, ServiceName } from '../../internal/types';
+import type { SignInRedirectionOptions, UserInfoResponse } from './types';
+export default class SessionService extends BaseAccountService {
+    serviceName: ServiceName;
+    /** Redirect to login page within app runtime environment. */
+    redirectToLogin(options?: SignInRedirectionOptions): AccountServiceResponse<'success'>;
+    /** Sign out current user session. */
+    signOut(): Promise<AccountServiceResponse<null>>;
+    /** Get current page URL with biz_source parameter */
+    getUrlWithBizSource(): string;
+    /** Gets the current user information if there is an existing session. */
+    getUserInfo(): Promise<AccountServiceResponse<UserInfoResponse>>;
+    /** Navigate to user profile page within app runtime environment. */
+    navigateToUserProfile(options?: {
+        newTab?: boolean;
+    }): {
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            hint: string;
+            details: string;
+        };
+        status: number;
+        statusText: string;
+    } | {
+        data: string;
+        error: null;
+        status: number;
+        statusText: string;
+    };
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/account/services/session-service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/account/services/session-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAG1D,OAAO,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAGV,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAcjB,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,kBAAkB;IACnD,WAAW,cAA8B;IAElD,6DAA6D;IAC7D,eAAe,CACb,OAAO,CAAC,EAAE,wBAAwB,GACjC,sBAAsB,CAAC,SAAS,CAAC;IAqCpC,qCAAqC;IAC/B,OAAO,IAAI,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAyBtD,qDAAqD;IACrD,mBAAmB,IAAI,MAAM;IAkB7B,yEAAyE;IACnE,WAAW,IAAI,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAqDtE,oEAAoE;IACpE,qBAAqB,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;CA+BrD"}

package/lib/account/services/session-service/index.js

@@ -0,0 +1,137 @@
+import BaseAccountService from "../../BaseAccountService.js";
+import { isBrowser } from "../../internal/helpers.js";
+import { reportAccountException } from "../../internal/slardar.js";
+import { ServiceName } from "../../internal/types.js";
+const browserEnvError = {
+    data: null,
+    error: {
+        code: 400,
+        message: 'Incompatible runtime environment',
+        hint: 'Please check if the current environment is browser.',
+        details: 'This method can only be invoked in browser environment.'
+    },
+    status: 400,
+    statusText: 'Bad Request'
+};
+class SessionService extends BaseAccountService {
+    redirectToLogin(options) {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'redirectToLogin',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.RedirectToLogin] authClient.session.redirectToLogin can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const { returnUrl, newTab = false } = options ?? {};
+        const encodedRedirectUrl = encodeURIComponent(decodeURIComponent(returnUrl || window.location.href));
+        const isSparkFaasPath = window.location.pathname.startsWith('/spark');
+        const baseLoginUrl = isSparkFaasPath ? `/spark/faas/${this.appId}/runtime/page/login` : `/app/${this.appId}/runtime/page/login`;
+        const loginPageUrl = `${baseLoginUrl}?biz_source=${this.bizSource}&redirect_uri=${encodedRedirectUrl}`;
+        if (newTab) window.open(loginPageUrl, '_blank');
+        else window.location.href = loginPageUrl;
+        return {
+            data: 'success',
+            error: null,
+            status: 200,
+            statusText: 'OK'
+        };
+    }
+    async signOut() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'signOut',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.SignOut] authClient.session.signOut can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const location = this.getUrlWithBizSource();
+        return this.fetchData('/af/runtime/api/v1/account/logout', {
+            method: 'POST',
+            body: {
+                appID: this.appId,
+                redirectURI: location
+            }
+        });
+    }
+    getUrlWithBizSource() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'getUrlWithBizSource',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.GetUrlWithBizSource] authClient.session.getUrlWithBizSource can only be invoked in browser environment.');
+            return '';
+        }
+        const currentUrl = new URL(window.location.href);
+        currentUrl.searchParams.set('biz_source', this.bizSource);
+        return currentUrl.toString();
+    }
+    async getUserInfo() {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'getUserInfo',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.GetUserInfo] authClient.session.getUserInfo can only be invoked in browser environment.');
+            return Promise.resolve(browserEnvError);
+        }
+        const url = `/app/${this.appId}/__runtime__/api/v1/account/login/user`;
+        const urlObj = new URL(globalThis.location.href);
+        const pathSegments = urlObj.hostname.split('.');
+        const tenantDomainName = pathSegments[0] ?? '';
+        const response = await this.fetchData(url, {
+            method: 'POST',
+            body: {
+                appID: this.appId,
+                tenantDomainName
+            }
+        });
+        const userInfoResponse = {
+            data: {
+                user_info: {
+                    user_id: response.data?.userInfo?.userID,
+                    name: response.data?.userInfo?.name,
+                    avatar: response.data?.userInfo?.avatar,
+                    email: response.data?.userInfo?.email,
+                    phone_number: response.data?.userInfo?.desensitizedPhoneNumber
+                }
+            },
+            error: null,
+            status: response.status,
+            statusText: response.statusText
+        };
+        return userInfoResponse;
+    }
+    navigateToUserProfile(options) {
+        if (!isBrowser()) {
+            reportAccountException(browserEnvError.error, {
+                module: 'session-service',
+                method: 'navigateToUserProfile',
+                type: 'runtime'
+            });
+            console.log('[Account][SessionService.NavigateToUserProfile] authClient.session.navigateToUserProfile can only be invoked in browser environment.');
+            return browserEnvError;
+        }
+        const { newTab = false } = options ?? {};
+        const encodedReturnUrl = encodeURIComponent(window.location.href);
+        const profilePageUrl = `/suda/user?brand=${this.brandId}&returnUrl=${encodedReturnUrl}&appId=${this.appId}`;
+        if (newTab) window.open(profilePageUrl, '_blank');
+        else window.location.href = profilePageUrl;
+        return {
+            data: 'success',
+            error: null,
+            status: 200,
+            statusText: 'OK'
+        };
+    }
+    constructor(...args){
+        super(...args), this.serviceName = ServiceName.SessionService;
+    }
+}
+export { SessionService as default };

package/lib/account/services/session-service/types.d.ts

@@ -0,0 +1,30 @@
+export interface I18n {
+    language_code: number;
+    text: string;
+}
+export type I18ns = I18n[];
+export interface Avatar {
+    source?: string;
+    image?: {
+        large?: string;
+    };
+    color?: string;
+}
+export interface SignInRedirectionOptions {
+    /** The URL to redirect to after a successful login. Defaults to the current URL. */
+    returnUrl?: string;
+    /** Whether to open the login page in a new tab. Defaults to `false`. */
+    newTab?: boolean;
+}
+export interface UserBaseInfo {
+    user_id?: number;
+    name?: I18ns;
+    avatar?: Avatar;
+    email?: string;
+    phone_number?: string;
+    tenant_name?: string;
+}
+export interface UserInfoResponse {
+    user_info?: UserBaseInfo;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/account/services/session-service/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/account/services/session-service/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,IAAI;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;AAE3B,MAAM,WAAW,MAAM;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B"}

package/lib/account/services/user-service/index.d.ts

@@ -0,0 +1,9 @@
+import BaseAccountService from '../../BaseAccountService';
+import { type AccountServiceResponse, ServiceName } from '../../internal/types';
+import type { SearchParams, UserResponse } from './types';
+export default class UserService extends BaseAccountService {
+    serviceName: ServiceName;
+    search(params: SearchParams): Promise<AccountServiceResponse<UserResponse>>;
+    getByIds(ids: string[] | number[]): Promise<AccountServiceResponse<UserResponse>>;
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/account/services/user-service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/account/services/user-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,kBAAkB;IAChD,WAAW,cAA2B;IAEzC,MAAM,CACV,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAqC1C,QAAQ,CACZ,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GACvB,OAAO,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;CAkCjD"}

package/lib/account/services/user-service/index.js

@@ -0,0 +1,60 @@
+import BaseAccountService from "../../BaseAccountService.js";
+import { convertUserStatus, retrieveNameFromI18n } from "../../internal/helpers.js";
+import { ServiceName } from "../../internal/types.js";
+class UserService extends BaseAccountService {
+    async search(params) {
+        const { name, pageSize } = params;
+        const res = await this.fetchData(`/app/${this.appId}/__runtime__/api/v1/account/search_user`, {
+            method: 'POST',
+            body: {
+                query: name,
+                page_size: pageSize
+            }
+        }, {
+            psmName: 'UserService.Search'
+        });
+        if (res.error) return res;
+        return {
+            ...res,
+            data: {
+                user_list: res.data?.userList?.map((item)=>({
+                        avatar: item.avatar ?? '',
+                        email: item.email ?? '',
+                        name: retrieveNameFromI18n(item.name) ?? '',
+                        status: convertUserStatus(item.userStatus),
+                        user_id: item.userID ?? ''
+                    })) ?? []
+            }
+        };
+    }
+    async getByIds(ids) {
+        const res = await this.fetchData(`/app/${this.appId}/__runtime__/api/v1/account/list_users`, {
+            method: 'POST',
+            body: {
+                userIDList: ids
+            }
+        }, {
+            psmName: 'UserService.GetByIds'
+        });
+        if (res.error) return res;
+        return {
+            ...res,
+            data: {
+                user_list: ids.map((id)=>{
+                    const item = res.data?.userInfoMap?.[id];
+                    return {
+                        avatar: item?.avatar?.image?.large ?? '',
+                        email: item?.email ?? '',
+                        name: retrieveNameFromI18n(item?.name) ?? '',
+                        status: convertUserStatus(item?.userStatus),
+                        user_id: item?.userID ? String(item.userID) : ''
+                    };
+                })
+            }
+        };
+    }
+    constructor(...args){
+        super(...args), this.serviceName = ServiceName.UserService;
+    }
+}
+export { UserService as default };

package/lib/account/services/user-service/types.d.ts

@@ -0,0 +1,51 @@
+import type { AccountStatus, UserStatus } from '../../internal/types';
+export type I18n = {
+    zh_cn: string;
+    en_us: string;
+    ja_jp: string;
+};
+export type SearchParams = {
+    name: string;
+    pageSize?: number;
+};
+export type User = {
+    user_id: string;
+    email: string;
+    name: string;
+    avatar: string;
+    status: UserStatus;
+};
+export type DepartmentEntity = {
+    departmentID: string;
+    larkDepartmentID: string;
+    name: I18n;
+};
+export type SearchUserEntity = {
+    userID: string;
+    larkUserID: string;
+    name: I18n;
+    avatar: string;
+    userType: string;
+    email: string;
+    userStatus: AccountStatus;
+    department: DepartmentEntity;
+};
+export type GetByIdUserEntity = {
+    userID: number;
+    larkUserID: number;
+    name: I18n;
+    avatar: {
+        source: string;
+        image?: {
+            large: string;
+        };
+    };
+    userType: string;
+    email: string;
+    userStatus: AccountStatus;
+    department: DepartmentEntity;
+};
+export type UserResponse = {
+    user_list: User[];
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/account/services/user-service/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/account/services/user-service/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE;YACN,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,IAAI,EAAE,CAAC;CACnB,CAAC"}

package/lib/index.d.ts

@@ -1,12 +1,18 @@
 /**
  * @lark-apaas/auth-sdk
  *
- * 基于 CASL 的前端鉴权 SDK
- * 封装了权限数据获取和 Ability 初始化逻辑
+ * 妙搭账户与鉴权 SDK：
+ * - 基于 CASL 的前端权限点鉴权（PermissionClient / AuthProvider / useCan）
+ * - 账户与会话能力（user / session services） — 见 ./account
  */
 export type { PermissionApiResponse, PermissionApiConfig, PermissionPointData, AuthSdkConfig, } from './types';
 export { ROLE_SUBJECT } from './ability-factory';
 export { PermissionClient } from './permission-client';
 export { AuthProvider, useAuth, Can, CanRole, useCan, AbilityContext, useUserPermissions, } from './AuthProvider';
 export type { AuthProviderProps } from './AuthProvider';
+export { AccountClient } from './account';
+export type { AccountServiceResponse, AccountServiceError, SearchParams, User, UserResponse, SignInRedirectionOptions, UserBaseInfo, UserInfoResponse, Avatar, } from './account';
+export { AccountStatus, UserStatus } from './account/internal/types';
+import { AccountClient } from './account';
+export declare const authClient: AccountClient;
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EACL,YAAY,EACZ,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,cAAc,EACd,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EACL,YAAY,EACZ,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,cAAc,EACd,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,IAAI,EACJ,YAAY,EACZ,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,MAAM,GACP,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,eAAO,MAAM,UAAU,eAAsB,CAAC"}

package/lib/index.js

@@ -1,4 +1,7 @@
 import { ROLE_SUBJECT } from "./ability-factory.js";
 import { PermissionClient } from "./permission-client.js";
 import { AbilityContext, AuthProvider, Can, CanRole, useAuth, useCan, useUserPermissions } from "./AuthProvider.js";
-export { AbilityContext, AuthProvider, Can, CanRole, PermissionClient, ROLE_SUBJECT, useAuth, useCan, useUserPermissions };
+import { AccountClient } from "./account/index.js";
+import { AccountStatus, UserStatus } from "./account/internal/types.js";
+const authClient = new AccountClient();
+export { AbilityContext, AccountClient, AccountStatus, AuthProvider, Can, CanRole, PermissionClient, ROLE_SUBJECT, UserStatus, authClient, useAuth, useCan, useUserPermissions };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lark-apaas/auth-sdk",
-  "version": "0.1.4",
-  "description": "基于 CASL 的前端鉴权 SDK",
+  "version": "0.1.5-alpha.0",
+  "description": "妙搭账户与鉴权 SDK：CASL 权限点 + 账户/会话能力",
   "types": "./lib/index.d.ts",
   "main": "./lib/index.js",
   "module": "./lib/index.js",