@longzai-intelligence-auth/core 0.0.1

package/dist/errors/auth.errors.d.ts

@@ -0,0 +1,37 @@
+import { DomainError } from "@longzai-intelligence/error";
+export declare class TokenExpiredError extends DomainError {
+    constructor(message?: string);
+}
+export declare class TokenInvalidError extends DomainError {
+    constructor(message?: string);
+}
+export declare class TokenMissingError extends DomainError {
+    constructor(message?: string);
+}
+export declare class MfaRequiredError extends DomainError {
+    constructor(message?: string);
+}
+export declare class InvalidCredentialsError extends DomainError {
+    constructor(message?: string);
+}
+export declare class AccountDisabledError extends DomainError {
+    constructor(message?: string);
+}
+export declare class UserNotFoundError extends DomainError {
+    constructor(message?: string);
+}
+export declare class UserAlreadyExistsError extends DomainError {
+    constructor(message?: string);
+}
+export declare class PasswordPolicyViolationError extends DomainError {
+    constructor(message?: string);
+}
+export declare class SessionNotFoundError extends DomainError {
+    constructor(message?: string);
+}
+export declare class SessionExpiredError extends DomainError {
+    constructor(message?: string);
+}
+export declare class RateLimitExceededError extends DomainError {
+    constructor(message?: string);
+}

package/dist/errors/auth.errors.js

@@ -0,0 +1,61 @@
+import { DomainError } from "@longzai-intelligence/error";
+export class TokenExpiredError extends DomainError {
+    constructor(message = "认证令牌已过期") {
+        super(message, "TOKEN_EXPIRED");
+    }
+}
+export class TokenInvalidError extends DomainError {
+    constructor(message = "无效的认证令牌") {
+        super(message, "TOKEN_INVALID");
+    }
+}
+export class TokenMissingError extends DomainError {
+    constructor(message = "未认证，请先登录") {
+        super(message, "TOKEN_MISSING");
+    }
+}
+export class MfaRequiredError extends DomainError {
+    constructor(message = "需要多因素认证验证") {
+        super(message, "MFA_REQUIRED");
+    }
+}
+export class InvalidCredentialsError extends DomainError {
+    constructor(message = "用户名或密码错误") {
+        super(message, "INVALID_CREDENTIALS");
+    }
+}
+export class AccountDisabledError extends DomainError {
+    constructor(message = "账户已被禁用") {
+        super(message, "ACCOUNT_DISABLED");
+    }
+}
+export class UserNotFoundError extends DomainError {
+    constructor(message = "用户不存在") {
+        super(message, "USER_NOT_FOUND");
+    }
+}
+export class UserAlreadyExistsError extends DomainError {
+    constructor(message = "用户已存在") {
+        super(message, "USER_ALREADY_EXISTS");
+    }
+}
+export class PasswordPolicyViolationError extends DomainError {
+    constructor(message = "密码不符合策略要求") {
+        super(message, "PASSWORD_POLICY_VIOLATION");
+    }
+}
+export class SessionNotFoundError extends DomainError {
+    constructor(message = "会话不存在") {
+        super(message, "SESSION_NOT_FOUND");
+    }
+}
+export class SessionExpiredError extends DomainError {
+    constructor(message = "会话已过期") {
+        super(message, "SESSION_EXPIRED");
+    }
+}
+export class RateLimitExceededError extends DomainError {
+    constructor(message = "请求过于频繁，请稍后再试") {
+        super(message, "RATE_LIMIT_EXCEEDED");
+    }
+}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+export type { AccessTokenPayload, RefreshTokenPayload, PasswordResetTokenPayload, MfaPendingTokenPayload, TokenPayload, } from "./types/token.types";
+export type { AuthContext, UserInfo } from "./types/auth-context.types";
+export type { ResourceAction, PermissionCheckFn, TenantPermissionCheckFn, } from "./types/permission.types";
+export type { JwtConfig, PasswordPolicyConfig, AuthConfig, } from "./types/config.types";
+export type { PasswordValidationResult } from "./types/password.types";
+export type { RateLimitConfig } from "./types/rate-limit.types";
+export type { LoggerService } from "./types/logger.types";
+export type { LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, RefreshTokenRequest, RefreshTokenResponse, PasswordResetRequest, PasswordResetConfirmRequest, ChangePasswordRequest, MessageResponse, MeResponse, } from "./types/auth-api.types";
+export type { User, UserStatus, CreateUserInput, UpdateUserInput, } from "./types/user.types";
+export type { Session, CreateSessionInput, SessionInfo, } from "./types/session.types";
+export type { Tenant, TenantStatus, CreateTenantInput, UpdateTenantInput, } from "./types/tenant.types";
+export type { TenantMember, TenantMemberRole, CreateTenantMemberInput, } from "./types/tenant-member.types";
+export { jwtConfigSchema, passwordPolicyConfigSchema, rateLimitConfigSchema, authConfigSchema, } from "./schemas/auth-config.schema";
+export { accessTokenPayloadSchema, refreshTokenPayloadSchema, passwordResetTokenPayloadSchema, mfaPendingTokenPayloadSchema, } from "./schemas/token.schema";
+export { permissionStringSchema, resourceActionSchema, } from "./schemas/permission.schema";
+export { createUserSchema, updateUserSchema, changePasswordSchema, } from "./schemas/user.schema";
+export { loginSchema, refreshTokenSchema, } from "./schemas/session.schema";
+export type { AuthBackendPort, LocalAuthBackend, IdentityAuthBackend, UserPort, SessionPort, TokenPort, TenantPort, TenantMemberPort, UserAuthInfo, VerifyPasswordResult, TenantValidateResult, UserRolePort, UserAuthPort, TenantValidateFn, } from "./ports/auth-backend.port";
+export type { PasswordHasher } from "./ports/password-hash.port";
+export type { AuthStrategy, TokenSigner, TokenVerifier, TokenVerifyResult, RateLimiter, } from "./ports/strategy.port";
+export { TokenExpiredError, TokenInvalidError, TokenMissingError, MfaRequiredError, InvalidCredentialsError, AccountDisabledError, UserNotFoundError, UserAlreadyExistsError, PasswordPolicyViolationError, SessionNotFoundError, SessionExpiredError, RateLimitExceededError, } from "./errors/auth.errors";

package/dist/index.js

@@ -0,0 +1,6 @@
+export { jwtConfigSchema, passwordPolicyConfigSchema, rateLimitConfigSchema, authConfigSchema, } from "./schemas/auth-config.schema";
+export { accessTokenPayloadSchema, refreshTokenPayloadSchema, passwordResetTokenPayloadSchema, mfaPendingTokenPayloadSchema, } from "./schemas/token.schema";
+export { permissionStringSchema, resourceActionSchema, } from "./schemas/permission.schema";
+export { createUserSchema, updateUserSchema, changePasswordSchema, } from "./schemas/user.schema";
+export { loginSchema, refreshTokenSchema, } from "./schemas/session.schema";
+export { TokenExpiredError, TokenInvalidError, TokenMissingError, MfaRequiredError, InvalidCredentialsError, AccountDisabledError, UserNotFoundError, UserAlreadyExistsError, PasswordPolicyViolationError, SessionNotFoundError, SessionExpiredError, RateLimitExceededError, } from "./errors/auth.errors";

package/dist/ports/auth-backend.port.d.ts

@@ -0,0 +1,73 @@
+import type { User, CreateUserInput, UpdateUserInput, UserStatus, Session, CreateSessionInput, Tenant, CreateTenantInput, TenantMember, AccessTokenPayload, RefreshTokenPayload, ResourceAction } from "../types";
+export type UserAuthInfo = {
+    userId: string;
+    email: string;
+    tenantId: string;
+    status: UserStatus;
+    passwordHash: string;
+    mfaEnabled: boolean;
+    mfaSecret: string | null;
+    failedLoginAttempts: number;
+    lockedUntil: string | null;
+};
+export type VerifyPasswordResult = {
+    success: boolean;
+    user?: User;
+    error?: string;
+};
+export type TenantValidateResult = {
+    valid: boolean;
+    tenant?: Tenant;
+    error?: string;
+};
+export type UserPort = {
+    findById(userId: string): Promise<User | null>;
+    findByEmail(email: string): Promise<User | null>;
+    findByUsername(username: string): Promise<User | null>;
+    findAuthInfo(userId: string): Promise<UserAuthInfo | null>;
+    findAuthInfoByEmail(email: string): Promise<UserAuthInfo | null>;
+    findPermissions(userId: string, tenantId: string): Promise<ResourceAction[]>;
+    isSuperAdmin(userId: string, tenantId: string): Promise<boolean>;
+    create(input: CreateUserInput): Promise<User>;
+    update(userId: string, input: UpdateUserInput): Promise<User>;
+    verifyPassword(email: string, password: string): Promise<VerifyPasswordResult>;
+    updatePassword(userId: string, newPasswordHash: string): Promise<void>;
+};
+export type SessionPort = {
+    create(input: CreateSessionInput): Promise<Session>;
+    findById(sessionId: string): Promise<Session | null>;
+    findByRefreshTokenHash(hash: string): Promise<Session | null>;
+    revoke(sessionId: string): Promise<void>;
+    revokeAllByUser(userId: string): Promise<void>;
+};
+export type TokenPort = {
+    signAccessToken(payload: AccessTokenPayload): Promise<string>;
+    signRefreshToken(payload: RefreshTokenPayload): Promise<string>;
+    verifyAccessToken(token: string): Promise<AccessTokenPayload>;
+    verifyRefreshToken(token: string): Promise<RefreshTokenPayload>;
+};
+export type TenantPort = {
+    findById(tenantId: string): Promise<Tenant | null>;
+    findBySlug(slug: string): Promise<Tenant | null>;
+    create(input: CreateTenantInput): Promise<Tenant>;
+    validateStatus(tenantId: string): Promise<TenantValidateResult>;
+};
+export type TenantMemberPort = {
+    getMember(tenantId: string, userId: string): Promise<TenantMember | null>;
+    addMember(tenantId: string, userId: string, role: string): Promise<TenantMember>;
+    removeMember(tenantId: string, userId: string): Promise<void>;
+    isMember(tenantId: string, userId: string): Promise<boolean>;
+};
+export type LocalAuthBackend = {
+    user: UserPort;
+    session: SessionPort;
+    token: TokenPort;
+};
+export type IdentityAuthBackend = LocalAuthBackend & {
+    tenant: TenantPort;
+    tenantMember: TenantMemberPort;
+};
+export type AuthBackendPort = IdentityAuthBackend;
+export type UserRolePort = UserPort;
+export type UserAuthPort = UserPort;
+export type TenantValidateFn = (tenantId: string) => Promise<TenantValidateResult>;

package/dist/ports/auth-backend.port.js

@@ -0,0 +1 @@
+export {};

package/dist/ports/index.d.ts

@@ -0,0 +1,3 @@
+export type { AuthBackendPort, LocalAuthBackend, IdentityAuthBackend, UserPort, SessionPort, TokenPort, TenantPort, TenantMemberPort, UserAuthInfo, VerifyPasswordResult, TenantValidateResult, } from "./auth-backend.port";
+export type { PasswordHasher } from "./password-hash.port";
+export type { AuthStrategy, TokenSigner, TokenVerifier, TokenVerifyResult, RateLimiter, } from "./strategy.port";

package/dist/ports/index.js

@@ -0,0 +1 @@
+export {};

package/dist/ports/password-hash.port.d.ts

@@ -0,0 +1,4 @@
+export type PasswordHasher = {
+    hash(password: string): Promise<string>;
+    verify(password: string, hash: string): Promise<boolean>;
+};

package/dist/ports/password-hash.port.js

@@ -0,0 +1 @@
+export {};

package/dist/ports/strategy.port.d.ts

@@ -0,0 +1,26 @@
+import type { AccessTokenPayload, RefreshTokenPayload } from "../types/token.types";
+export type TokenVerifyResult<T> = {
+    success: boolean;
+    payload?: T;
+    error?: string;
+};
+export type TokenSigner = {
+    signAccessToken(payload: AccessTokenPayload): Promise<string>;
+    signRefreshToken(payload: RefreshTokenPayload): Promise<string>;
+};
+export type TokenVerifier = {
+    verifyAccessToken(token: string): Promise<TokenVerifyResult<AccessTokenPayload>>;
+    verifyRefreshToken(token: string): Promise<TokenVerifyResult<RefreshTokenPayload>>;
+};
+export type AuthStrategy = {
+    name: string;
+    verify(credentials: unknown): Promise<AccessTokenPayload>;
+};
+export type RateLimiter = {
+    check(key: string): Promise<{
+        allowed: boolean;
+        remaining: number;
+        resetAt: Date;
+    }>;
+    reset(key: string): Promise<void>;
+};

package/dist/ports/strategy.port.js

@@ -0,0 +1 @@
+export {};

package/dist/schemas/auth-config.schema.d.ts

@@ -0,0 +1,36 @@
+import { z } from "zod";
+export declare const jwtConfigSchema: z.ZodObject<{
+    secret: z.ZodString;
+    accessExpiresIn: z.ZodDefault<z.ZodString>;
+    refreshExpiresIn: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export declare const passwordPolicyConfigSchema: z.ZodObject<{
+    minLength: z.ZodDefault<z.ZodNumber>;
+    requireUppercase: z.ZodDefault<z.ZodBoolean>;
+    requireLowercase: z.ZodDefault<z.ZodBoolean>;
+    requireNumber: z.ZodDefault<z.ZodBoolean>;
+    requireSpecial: z.ZodDefault<z.ZodBoolean>;
+    historyCount: z.ZodDefault<z.ZodNumber>;
+    expireDays: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const rateLimitConfigSchema: z.ZodObject<{
+    windowSeconds: z.ZodDefault<z.ZodNumber>;
+    maxRequests: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const authConfigSchema: z.ZodObject<{
+    jwt: z.ZodObject<{
+        secret: z.ZodString;
+        accessExpiresIn: z.ZodDefault<z.ZodString>;
+        refreshExpiresIn: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>;
+    passwordPolicy: z.ZodObject<{
+        minLength: z.ZodDefault<z.ZodNumber>;
+        requireUppercase: z.ZodDefault<z.ZodBoolean>;
+        requireLowercase: z.ZodDefault<z.ZodBoolean>;
+        requireNumber: z.ZodDefault<z.ZodBoolean>;
+        requireSpecial: z.ZodDefault<z.ZodBoolean>;
+        historyCount: z.ZodDefault<z.ZodNumber>;
+        expireDays: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    defaultTenantId: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;

package/dist/schemas/auth-config.schema.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+export const jwtConfigSchema = z.object({
+    secret: z.string().min(1, "JWT 密钥不能为空"),
+    accessExpiresIn: z.string().default("15m"),
+    refreshExpiresIn: z.string().default("7d"),
+});
+export const passwordPolicyConfigSchema = z.object({
+    minLength: z.number().int().positive().default(8),
+    requireUppercase: z.boolean().default(true),
+    requireLowercase: z.boolean().default(true),
+    requireNumber: z.boolean().default(true),
+    requireSpecial: z.boolean().default(false),
+    historyCount: z.number().int().nonnegative().default(5),
+    expireDays: z.number().int().nonnegative().default(0),
+});
+export const rateLimitConfigSchema = z.object({
+    windowSeconds: z.number().int().positive().default(60),
+    maxRequests: z.number().int().positive().default(100),
+});
+export const authConfigSchema = z.object({
+    jwt: jwtConfigSchema,
+    passwordPolicy: passwordPolicyConfigSchema,
+    defaultTenantId: z.string().min(1).default("default"),
+});

package/dist/schemas/permission.schema.d.ts

@@ -0,0 +1,6 @@
+import { z } from "zod";
+export declare const permissionStringSchema: z.ZodString;
+export declare const resourceActionSchema: z.ZodObject<{
+    resource: z.ZodString;
+    action: z.ZodString;
+}, z.core.$strip>;

package/dist/schemas/permission.schema.js

@@ -0,0 +1,6 @@
+import { z } from "zod";
+export const permissionStringSchema = z.string().regex(/^[a-zA-Z0-9_-]+:[a-zA-Z0-9_-]+$/, "权限格式应为 resource:action");
+export const resourceActionSchema = z.object({
+    resource: z.string().min(1),
+    action: z.string().min(1),
+});

package/dist/schemas/session.schema.d.ts

@@ -0,0 +1,8 @@
+import { z } from "zod";
+export declare const loginSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+export declare const refreshTokenSchema: z.ZodObject<{
+    refreshToken: z.ZodString;
+}, z.core.$strip>;

package/dist/schemas/session.schema.js

@@ -0,0 +1,8 @@
+import { z } from "zod";
+export const loginSchema = z.object({
+    email: z.string().email("邮箱格式无效"),
+    password: z.string("请输入密码"),
+});
+export const refreshTokenSchema = z.object({
+    refreshToken: z.string("请输入刷新令牌"),
+});

package/dist/schemas/token.schema.d.ts

@@ -0,0 +1,24 @@
+import { z } from "zod";
+export declare const accessTokenPayloadSchema: z.ZodObject<{
+    sub: z.ZodString;
+    type: z.ZodLiteral<"access">;
+    tenantId: z.ZodOptional<z.ZodString>;
+    iss: z.ZodOptional<z.ZodString>;
+    aud: z.ZodOptional<z.ZodString>;
+    jti: z.ZodOptional<z.ZodString>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const refreshTokenPayloadSchema: z.ZodObject<{
+    sub: z.ZodString;
+    sessionId: z.ZodString;
+    type: z.ZodLiteral<"refresh">;
+}, z.core.$strip>;
+export declare const passwordResetTokenPayloadSchema: z.ZodObject<{
+    sub: z.ZodString;
+    type: z.ZodLiteral<"password_reset">;
+}, z.core.$strip>;
+export declare const mfaPendingTokenPayloadSchema: z.ZodObject<{
+    sub: z.ZodString;
+    type: z.ZodLiteral<"mfa_pending">;
+}, z.core.$strip>;

package/dist/schemas/token.schema.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+export const accessTokenPayloadSchema = z.object({
+    sub: z.string(),
+    type: z.literal("access"),
+    tenantId: z.string().optional(),
+    iss: z.string().optional(),
+    aud: z.string().optional(),
+    jti: z.string().optional(),
+    roles: z.array(z.string()).optional(),
+    permissions: z.array(z.string()).optional(),
+});
+export const refreshTokenPayloadSchema = z.object({
+    sub: z.string(),
+    sessionId: z.string(),
+    type: z.literal("refresh"),
+});
+export const passwordResetTokenPayloadSchema = z.object({
+    sub: z.string(),
+    type: z.literal("password_reset"),
+});
+export const mfaPendingTokenPayloadSchema = z.object({
+    sub: z.string(),
+    type: z.literal("mfa_pending"),
+});

package/dist/schemas/user.schema.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const createUserSchema: z.ZodObject<{
+    email: z.ZodString;
+    username: z.ZodString;
+    password: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const updateUserSchema: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    avatarUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const changePasswordSchema: z.ZodObject<{
+    currentPassword: z.ZodString;
+    newPassword: z.ZodString;
+}, z.core.$strip>;

package/dist/schemas/user.schema.js

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export const createUserSchema = z.object({
+    email: z.string().email("邮箱格式无效"),
+    username: z.string().min(3, "用户名至少 3 个字符").max(50, "用户名最多 50 个字符"),
+    password: z.string().min(8, "密码至少 8 个字符").max(128, "密码最多 128 个字符"),
+    displayName: z.string().optional(),
+});
+export const updateUserSchema = z.object({
+    displayName: z.string().optional(),
+    avatarUrl: z.string().url("头像 URL 格式无效").optional(),
+});
+export const changePasswordSchema = z.object({
+    currentPassword: z.string("请输入当前密码"),
+    newPassword: z.string().min(8, "新密码至少 8 个字符").max(128, "新密码最多 128 个字符"),
+});

package/dist/types/audit.types.d.ts

@@ -0,0 +1 @@
+export type { AuditLogEntry } from "@longzai-intelligence-audit/audit-log-contract";

package/dist/types/audit.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/auth-api.types.d.ts

@@ -0,0 +1,42 @@
+export type LoginRequest = {
+    email: string;
+    password: string;
+};
+export type LoginResponse = {
+    accessToken: string;
+    refreshToken: string;
+};
+export type RegisterRequest = {
+    email: string;
+    password: string;
+    name: string;
+};
+export type RegisterResponse = {
+    userId: string;
+    message: string;
+};
+export type RefreshTokenRequest = {
+    refreshToken: string;
+};
+export type RefreshTokenResponse = {
+    accessToken: string;
+    refreshToken: string;
+};
+export type PasswordResetRequest = {
+    email: string;
+};
+export type PasswordResetConfirmRequest = {
+    token: string;
+    password: string;
+};
+export type ChangePasswordRequest = {
+    oldPassword: string;
+    newPassword: string;
+};
+export type MessageResponse = {
+    message: string;
+};
+export type MeResponse = {
+    userId: string;
+    tenantId?: string;
+};

package/dist/types/auth-api.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/auth-context.types.d.ts

@@ -0,0 +1,8 @@
+export type UserInfo = {
+    userId: string;
+    tenantId?: string;
+};
+export type AuthContext = {
+    userId: string;
+    tenantId?: string;
+};

package/dist/types/auth-context.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/config.types.d.ts

@@ -0,0 +1,19 @@
+export type JwtConfig = {
+    secret: string;
+    accessExpiresIn: string;
+    refreshExpiresIn: string;
+};
+export type PasswordPolicyConfig = {
+    minLength: number;
+    requireUppercase: boolean;
+    requireLowercase: boolean;
+    requireNumber: boolean;
+    requireSpecial: boolean;
+    historyCount: number;
+    expireDays: number;
+};
+export type AuthConfig = {
+    jwt: JwtConfig;
+    passwordPolicy: PasswordPolicyConfig;
+    defaultTenantId: string;
+};

package/dist/types/config.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./auth-api.types";
+export * from "./auth-context.types";
+export * from "./config.types";
+export * from "./logger.types";
+export * from "./password.types";
+export * from "./permission.types";
+export * from "./rate-limit.types";
+export * from "./session.types";
+export * from "./tenant-member.types";
+export * from "./tenant.types";
+export * from "./token.types";
+export * from "./user.types";

package/dist/types/index.js

@@ -0,0 +1,12 @@
+export * from "./auth-api.types";
+export * from "./auth-context.types";
+export * from "./config.types";
+export * from "./logger.types";
+export * from "./password.types";
+export * from "./permission.types";
+export * from "./rate-limit.types";
+export * from "./session.types";
+export * from "./tenant-member.types";
+export * from "./tenant.types";
+export * from "./token.types";
+export * from "./user.types";

package/dist/types/logger.types.d.ts

@@ -0,0 +1,6 @@
+export type LoggerService = {
+    debug(message: string, context?: Record<string, unknown>): void;
+    info(message: string, context?: Record<string, unknown>): void;
+    warn(message: string, context?: Record<string, unknown>): void;
+    error(message: string, context?: Record<string, unknown>): void;
+};

package/dist/types/logger.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/password.types.d.ts

@@ -0,0 +1,4 @@
+export type PasswordValidationResult = {
+    valid: boolean;
+    errors: string[];
+};

package/dist/types/password.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/permission.types.d.ts

@@ -0,0 +1,6 @@
+export type ResourceAction = {
+    resource: string;
+    action: string;
+};
+export type PermissionCheckFn = (userId: string, resource: string, action: string) => Promise<void>;
+export type TenantPermissionCheckFn = (userId: string, tenantId: string, resource: string, action: string) => Promise<void>;

package/dist/types/permission.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/rate-limit.types.d.ts

@@ -0,0 +1,4 @@
+export type RateLimitConfig = {
+    windowSeconds: number;
+    maxRequests: number;
+};

package/dist/types/rate-limit.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/session.types.d.ts

@@ -0,0 +1,21 @@
+export type Session = {
+    id: string;
+    userId: string;
+    tenantId: string;
+    refreshTokenHash: string;
+    deviceInfo: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    expiresAt: string;
+    createdAt: string;
+};
+export type CreateSessionInput = {
+    userId: string;
+    tenantId: string;
+    refreshTokenHash: string;
+    deviceInfo?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    expiresAt: string;
+};
+export type SessionInfo = Session;

package/dist/types/session.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/tenant-member.types.d.ts

@@ -0,0 +1,13 @@
+export type TenantMemberRole = "owner" | "admin" | "member";
+export type TenantMember = {
+    id: string;
+    tenantId: string;
+    userId: string;
+    role: TenantMemberRole;
+    joinedAt: string;
+};
+export type CreateTenantMemberInput = {
+    tenantId: string;
+    userId: string;
+    role?: TenantMemberRole;
+};

package/dist/types/tenant-member.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/tenant.types.d.ts

@@ -0,0 +1,22 @@
+export type TenantStatus = "active" | "suspended";
+export type Tenant = {
+    id: string;
+    name: string;
+    slug: string;
+    status: TenantStatus;
+    maxUsers: number;
+    settings: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type CreateTenantInput = {
+    name: string;
+    slug: string;
+    maxUsers?: number;
+    settings?: string;
+};
+export type UpdateTenantInput = {
+    name?: string;
+    maxUsers?: number;
+    settings?: string;
+};

package/dist/types/tenant.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/token.types.d.ts

@@ -0,0 +1,24 @@
+export type AccessTokenPayload = {
+    sub: string;
+    type: "access";
+    tenantId?: string;
+    iss?: string;
+    aud?: string;
+    jti?: string;
+    roles?: string[];
+    permissions?: string[];
+};
+export type RefreshTokenPayload = {
+    sub: string;
+    sessionId: string;
+    type: "refresh";
+};
+export type PasswordResetTokenPayload = {
+    sub: string;
+    type: "password_reset";
+};
+export type MfaPendingTokenPayload = {
+    sub: string;
+    type: "mfa_pending";
+};
+export type TokenPayload = AccessTokenPayload | RefreshTokenPayload | PasswordResetTokenPayload | MfaPendingTokenPayload;

package/dist/types/token.types.js

@@ -0,0 +1 @@
+export {};

package/dist/types/user.types.d.ts

@@ -0,0 +1,29 @@
+export type UserStatus = "active" | "disabled" | "locked";
+export type User = {
+    id: string;
+    email: string;
+    username: string;
+    passwordHash: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    status: UserStatus;
+    mfaEnabled: boolean;
+    mfaSecret: string | null;
+    failedLoginAttempts: number;
+    lockedUntil: string | null;
+    passwordChangedAt: string | null;
+    lastLoginAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type CreateUserInput = {
+    email: string;
+    username: string;
+    passwordHash: string;
+    displayName?: string;
+    avatarUrl?: string;
+};
+export type UpdateUserInput = {
+    displayName?: string;
+    avatarUrl?: string;
+};

package/dist/types/user.types.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@longzai-intelligence-auth/core",
+  "version": "0.0.1",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/longzai/longzai-intelligence-auth",
+    "directory": "packages/core"
+  },
+  "dependencies": {
+    "@longzai-intelligence/error": "^0.0.5",
+    "zod": "^4.4.3"
+  },
+  "scripts": {
+    "build": "tsgo --build",
+    "typecheck": "tsgo --noEmit",
+    "lint": "oxlint && oxfmt --check",
+    "lint:fix": "oxlint --fix && oxfmt",
+    "test": "bun test",
+    "clean": "rm -rf dist out .cache"
+  }
+}