@longzai-intelligence-auth/core 0.0.2 → 0.0.5

package/dist/ports/auth-backend.port.d.ts

@@ -1,53 +0,0 @@
-import type { User, CreateUserInput, UpdateUserInput, UserStatus, Session, CreateSessionInput, Tenant, AccessTokenPayload, RefreshTokenPayload, ResourceAction } from "../types";
-export type UserAuthInfo = {
-    userId: string;
-    email: string;
-    tenantId: string;
-    status: UserStatus;
-    passwordHash: string;
-    mfaEnabled: boolean;
-    mfaSecret: string | null;
-    failedLoginAttempts: number;
-    lockedUntil: string | null;
-};
-export type VerifyPasswordResult = {
-    success: boolean;
-    user?: User;
-    error?: string;
-};
-export type TenantValidateResult = {
-    valid: boolean;
-    tenant?: Tenant;
-    error?: string;
-};
-export type UserPort = {
-    findById(userId: string): Promise<User | null>;
-    findByEmail(email: string): Promise<User | null>;
-    findByUsername(username: string): Promise<User | null>;
-    findAuthInfo(userId: string): Promise<UserAuthInfo | null>;
-    findAuthInfoByEmail(email: string): Promise<UserAuthInfo | null>;
-    findPermissions(userId: string, tenantId: string): Promise<ResourceAction[]>;
-    isSuperAdmin(userId: string, tenantId: string): Promise<boolean>;
-    create(input: CreateUserInput): Promise<User>;
-    update(userId: string, input: UpdateUserInput): Promise<User>;
-    verifyPassword(email: string, password: string): Promise<VerifyPasswordResult>;
-    updatePassword(userId: string, newPasswordHash: string): Promise<void>;
-};
-export type SessionPort = {
-    create(input: CreateSessionInput): Promise<Session>;
-    findById(sessionId: string): Promise<Session | null>;
-    findByRefreshTokenHash(hash: string): Promise<Session | null>;
-    revoke(sessionId: string): Promise<void>;
-    revokeAllByUser(userId: string): Promise<void>;
-};
-export type TokenPort = {
-    signAccessToken(payload: AccessTokenPayload): Promise<string>;
-    signRefreshToken(payload: RefreshTokenPayload): Promise<string>;
-    verifyAccessToken(token: string): Promise<AccessTokenPayload>;
-    verifyRefreshToken(token: string): Promise<RefreshTokenPayload>;
-};
-export type AuthBackendPort = {
-    user: UserPort;
-    session: SessionPort;
-    token: TokenPort;
-};

package/dist/ports/auth-backend.port.js

@@ -1 +0,0 @@
-export {};

package/dist/ports/identity.port.d.ts

@@ -1,87 +0,0 @@
-import type { Tenant, CreateTenantInput, TenantMember } from "../types";
-import type { AuthBackendPort, TenantValidateResult } from "./auth-backend.port";
-export type TenantPort = {
-    findById(tenantId: string): Promise<Tenant | null>;
-    findBySlug(slug: string): Promise<Tenant | null>;
-    create(input: CreateTenantInput): Promise<Tenant>;
-    validateStatus(tenantId: string): Promise<TenantValidateResult>;
-};
-export type TenantMemberPort = {
-    getMember(tenantId: string, userId: string): Promise<TenantMember | null>;
-    addMember(tenantId: string, userId: string, role: string): Promise<TenantMember>;
-    removeMember(tenantId: string, userId: string): Promise<void>;
-    isMember(tenantId: string, userId: string): Promise<boolean>;
-};
-export type AuditLogEntry = {
-    id: string;
-    action: string;
-    resource: string;
-    resourceId?: string;
-    userId?: string;
-    tenantId?: string;
-    success: boolean;
-    metadata?: Record<string, unknown>;
-    ipAddress?: string;
-    userAgent?: string;
-    createdAt: string;
-    hashChain?: string;
-    previousHash?: string;
-};
-export type AuditLogQueryParams = {
-    page?: number;
-    pageSize?: number;
-    action?: string;
-    resource?: string;
-    userId?: string;
-    tenantId?: string;
-    startDate?: string;
-    endDate?: string;
-};
-export type PaginatedResult<T> = {
-    items: T[];
-    pagination: {
-        page: number;
-        pageSize: number;
-        total: number;
-        totalPages: number;
-        hasPrev: boolean;
-        hasNext: boolean;
-    };
-};
-export type AuditStatistics = {
-    totalEntries: number;
-    successCount: number;
-    failureCount: number;
-    topActions: {
-        action: string;
-        count: number;
-    }[];
-    topResources: {
-        resource: string;
-        count: number;
-    }[];
-};
-export type IntegrityVerificationResult = {
-    valid: boolean;
-    brokenAt: string | null;
-    totalChecked: number;
-};
-export type AuditLogPort = {
-    save(entry: AuditLogEntry): Promise<AuditLogEntry>;
-    findById(id: string): Promise<AuditLogEntry | null>;
-    query(params: AuditLogQueryParams): Promise<PaginatedResult<AuditLogEntry>>;
-    getStatistics(filter: AuditStatsFilter): Promise<AuditStatistics>;
-    deleteOlderThan(date: Date): Promise<number>;
-    verifyIntegrity(startId?: string): Promise<IntegrityVerificationResult>;
-};
-export type AuditStatsFilter = {
-    startDate?: string;
-    endDate?: string;
-    tenantId?: string;
-};
-export type IdentityAuthBackend = AuthBackendPort & {
-    tenant: TenantPort;
-    tenantMember: TenantMemberPort;
-    audit: AuditLogPort;
-};
-export type TenantValidateFn = (tenantId: string) => Promise<TenantValidateResult>;

package/dist/ports/identity.port.js

@@ -1 +0,0 @@
-export {};

package/dist/ports/index.d.ts

@@ -1,4 +0,0 @@
-export type { AuthBackendPort, UserPort, SessionPort, TokenPort, UserAuthInfo, VerifyPasswordResult, TenantValidateResult, } from "./auth-backend.port";
-export type { PasswordHasher } from "./password-hash.port";
-export type { AuthStrategy, TokenSigner, TokenVerifier, TokenVerifyResult, RateLimiter, } from "./strategy.port";
-export type { IdentityAuthBackend, TenantPort, TenantMemberPort, AuditLogPort, AuditLogEntry, AuditLogQueryParams, PaginatedResult, AuditStatistics, AuditStatsFilter, IntegrityVerificationResult, TenantValidateFn, } from "./identity.port";

package/dist/ports/index.js

@@ -1 +0,0 @@
-export {};

package/dist/ports/password-hash.port.d.ts

@@ -1,4 +0,0 @@
-export type PasswordHasher = {
-    hash(password: string): Promise<string>;
-    verify(password: string, hash: string): Promise<boolean>;
-};

package/dist/ports/password-hash.port.js

@@ -1 +0,0 @@
-export {};

package/dist/ports/strategy.port.d.ts

@@ -1,26 +0,0 @@
-import type { AccessTokenPayload, RefreshTokenPayload } from "../types/token.types";
-export type TokenVerifyResult<T> = {
-    success: boolean;
-    payload?: T;
-    error?: string;
-};
-export type TokenSigner = {
-    signAccessToken(payload: AccessTokenPayload): Promise<string>;
-    signRefreshToken(payload: RefreshTokenPayload): Promise<string>;
-};
-export type TokenVerifier = {
-    verifyAccessToken(token: string): Promise<TokenVerifyResult<AccessTokenPayload>>;
-    verifyRefreshToken(token: string): Promise<TokenVerifyResult<RefreshTokenPayload>>;
-};
-export type AuthStrategy = {
-    name: string;
-    verify(credentials: unknown): Promise<AccessTokenPayload>;
-};
-export type RateLimiter = {
-    check(key: string): Promise<{
-        allowed: boolean;
-        remaining: number;
-        resetAt: Date;
-    }>;
-    reset(key: string): Promise<void>;
-};

package/dist/ports/strategy.port.js

@@ -1 +0,0 @@
-export {};

package/dist/schemas/auth-config.schema.d.ts

@@ -1,36 +0,0 @@
-import { z } from "zod";
-export declare const jwtConfigSchema: z.ZodObject<{
-    secret: z.ZodString;
-    accessExpiresIn: z.ZodDefault<z.ZodString>;
-    refreshExpiresIn: z.ZodDefault<z.ZodString>;
-}, z.core.$strip>;
-export declare const passwordPolicyConfigSchema: z.ZodObject<{
-    minLength: z.ZodDefault<z.ZodNumber>;
-    requireUppercase: z.ZodDefault<z.ZodBoolean>;
-    requireLowercase: z.ZodDefault<z.ZodBoolean>;
-    requireNumber: z.ZodDefault<z.ZodBoolean>;
-    requireSpecial: z.ZodDefault<z.ZodBoolean>;
-    historyCount: z.ZodDefault<z.ZodNumber>;
-    expireDays: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip>;
-export declare const rateLimitConfigSchema: z.ZodObject<{
-    windowSeconds: z.ZodDefault<z.ZodNumber>;
-    maxRequests: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip>;
-export declare const authConfigSchema: z.ZodObject<{
-    jwt: z.ZodObject<{
-        secret: z.ZodString;
-        accessExpiresIn: z.ZodDefault<z.ZodString>;
-        refreshExpiresIn: z.ZodDefault<z.ZodString>;
-    }, z.core.$strip>;
-    passwordPolicy: z.ZodObject<{
-        minLength: z.ZodDefault<z.ZodNumber>;
-        requireUppercase: z.ZodDefault<z.ZodBoolean>;
-        requireLowercase: z.ZodDefault<z.ZodBoolean>;
-        requireNumber: z.ZodDefault<z.ZodBoolean>;
-        requireSpecial: z.ZodDefault<z.ZodBoolean>;
-        historyCount: z.ZodDefault<z.ZodNumber>;
-        expireDays: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>;
-    defaultTenantId: z.ZodDefault<z.ZodString>;
-}, z.core.$strip>;

package/dist/schemas/auth-config.schema.js

@@ -1,24 +0,0 @@
-import { z } from "zod";
-export const jwtConfigSchema = z.object({
-    secret: z.string().min(1, "JWT 密钥不能为空"),
-    accessExpiresIn: z.string().default("15m"),
-    refreshExpiresIn: z.string().default("7d"),
-});
-export const passwordPolicyConfigSchema = z.object({
-    minLength: z.number().int().positive().default(8),
-    requireUppercase: z.boolean().default(true),
-    requireLowercase: z.boolean().default(true),
-    requireNumber: z.boolean().default(true),
-    requireSpecial: z.boolean().default(false),
-    historyCount: z.number().int().nonnegative().default(5),
-    expireDays: z.number().int().nonnegative().default(0),
-});
-export const rateLimitConfigSchema = z.object({
-    windowSeconds: z.number().int().positive().default(60),
-    maxRequests: z.number().int().positive().default(100),
-});
-export const authConfigSchema = z.object({
-    jwt: jwtConfigSchema,
-    passwordPolicy: passwordPolicyConfigSchema,
-    defaultTenantId: z.string().min(1).default("default"),
-});

package/dist/schemas/permission.schema.d.ts

@@ -1,6 +0,0 @@
-import { z } from "zod";
-export declare const permissionStringSchema: z.ZodString;
-export declare const resourceActionSchema: z.ZodObject<{
-    resource: z.ZodString;
-    action: z.ZodString;
-}, z.core.$strip>;

package/dist/schemas/permission.schema.js

@@ -1,6 +0,0 @@
-import { z } from "zod";
-export const permissionStringSchema = z.string().regex(/^[a-zA-Z0-9_-]+:[a-zA-Z0-9_-]+$/, "权限格式应为 resource:action");
-export const resourceActionSchema = z.object({
-    resource: z.string().min(1),
-    action: z.string().min(1),
-});

package/dist/schemas/session.schema.d.ts

@@ -1,8 +0,0 @@
-import { z } from "zod";
-export declare const loginSchema: z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-}, z.core.$strip>;
-export declare const refreshTokenSchema: z.ZodObject<{
-    refreshToken: z.ZodString;
-}, z.core.$strip>;

package/dist/schemas/session.schema.js

@@ -1,8 +0,0 @@
-import { z } from "zod";
-export const loginSchema = z.object({
-    email: z.string().email("邮箱格式无效"),
-    password: z.string("请输入密码"),
-});
-export const refreshTokenSchema = z.object({
-    refreshToken: z.string("请输入刷新令牌"),
-});

package/dist/schemas/token.schema.d.ts

@@ -1,24 +0,0 @@
-import { z } from "zod";
-export declare const accessTokenPayloadSchema: z.ZodObject<{
-    sub: z.ZodString;
-    type: z.ZodLiteral<"access">;
-    tenantId: z.ZodOptional<z.ZodString>;
-    iss: z.ZodOptional<z.ZodString>;
-    aud: z.ZodOptional<z.ZodString>;
-    jti: z.ZodOptional<z.ZodString>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
-export declare const refreshTokenPayloadSchema: z.ZodObject<{
-    sub: z.ZodString;
-    sessionId: z.ZodString;
-    type: z.ZodLiteral<"refresh">;
-}, z.core.$strip>;
-export declare const passwordResetTokenPayloadSchema: z.ZodObject<{
-    sub: z.ZodString;
-    type: z.ZodLiteral<"password_reset">;
-}, z.core.$strip>;
-export declare const mfaPendingTokenPayloadSchema: z.ZodObject<{
-    sub: z.ZodString;
-    type: z.ZodLiteral<"mfa_pending">;
-}, z.core.$strip>;

package/dist/schemas/token.schema.js

@@ -1,24 +0,0 @@
-import { z } from "zod";
-export const accessTokenPayloadSchema = z.object({
-    sub: z.string(),
-    type: z.literal("access"),
-    tenantId: z.string().optional(),
-    iss: z.string().optional(),
-    aud: z.string().optional(),
-    jti: z.string().optional(),
-    roles: z.array(z.string()).optional(),
-    permissions: z.array(z.string()).optional(),
-});
-export const refreshTokenPayloadSchema = z.object({
-    sub: z.string(),
-    sessionId: z.string(),
-    type: z.literal("refresh"),
-});
-export const passwordResetTokenPayloadSchema = z.object({
-    sub: z.string(),
-    type: z.literal("password_reset"),
-});
-export const mfaPendingTokenPayloadSchema = z.object({
-    sub: z.string(),
-    type: z.literal("mfa_pending"),
-});

package/dist/schemas/user.schema.d.ts

@@ -1,15 +0,0 @@
-import { z } from "zod";
-export declare const createUserSchema: z.ZodObject<{
-    email: z.ZodString;
-    username: z.ZodString;
-    password: z.ZodString;
-    displayName: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export declare const updateUserSchema: z.ZodObject<{
-    displayName: z.ZodOptional<z.ZodString>;
-    avatarUrl: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export declare const changePasswordSchema: z.ZodObject<{
-    currentPassword: z.ZodString;
-    newPassword: z.ZodString;
-}, z.core.$strip>;

package/dist/schemas/user.schema.js

@@ -1,15 +0,0 @@
-import { z } from "zod";
-export const createUserSchema = z.object({
-    email: z.string().email("邮箱格式无效"),
-    username: z.string().min(3, "用户名至少 3 个字符").max(50, "用户名最多 50 个字符"),
-    password: z.string().min(8, "密码至少 8 个字符").max(128, "密码最多 128 个字符"),
-    displayName: z.string().optional(),
-});
-export const updateUserSchema = z.object({
-    displayName: z.string().optional(),
-    avatarUrl: z.string().url("头像 URL 格式无效").optional(),
-});
-export const changePasswordSchema = z.object({
-    currentPassword: z.string("请输入当前密码"),
-    newPassword: z.string().min(8, "新密码至少 8 个字符").max(128, "新密码最多 128 个字符"),
-});

package/dist/types/audit.types.d.ts

@@ -1 +0,0 @@
-export type { AuditLogEntry } from "@longzai-intelligence-audit/audit-log-contract";

package/dist/types/audit.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/auth-api.types.d.ts

@@ -1,42 +0,0 @@
-export type LoginRequest = {
-    email: string;
-    password: string;
-};
-export type LoginResponse = {
-    accessToken: string;
-    refreshToken: string;
-};
-export type RegisterRequest = {
-    email: string;
-    password: string;
-    name: string;
-};
-export type RegisterResponse = {
-    userId: string;
-    message: string;
-};
-export type RefreshTokenRequest = {
-    refreshToken: string;
-};
-export type RefreshTokenResponse = {
-    accessToken: string;
-    refreshToken: string;
-};
-export type PasswordResetRequest = {
-    email: string;
-};
-export type PasswordResetConfirmRequest = {
-    token: string;
-    password: string;
-};
-export type ChangePasswordRequest = {
-    oldPassword: string;
-    newPassword: string;
-};
-export type MessageResponse = {
-    message: string;
-};
-export type MeResponse = {
-    userId: string;
-    tenantId?: string;
-};

package/dist/types/auth-api.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/auth-context.types.d.ts

@@ -1,8 +0,0 @@
-export type UserInfo = {
-    userId: string;
-    tenantId?: string;
-};
-export type AuthContext = {
-    userId: string;
-    tenantId?: string;
-};

package/dist/types/auth-context.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/config.types.d.ts

@@ -1,19 +0,0 @@
-export type JwtConfig = {
-    secret: string;
-    accessExpiresIn: string;
-    refreshExpiresIn: string;
-};
-export type PasswordPolicyConfig = {
-    minLength: number;
-    requireUppercase: boolean;
-    requireLowercase: boolean;
-    requireNumber: boolean;
-    requireSpecial: boolean;
-    historyCount: number;
-    expireDays: number;
-};
-export type AuthConfig = {
-    jwt: JwtConfig;
-    passwordPolicy: PasswordPolicyConfig;
-    defaultTenantId: string;
-};

package/dist/types/config.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/index.d.ts

@@ -1,12 +0,0 @@
-export * from "./auth-api.types";
-export * from "./auth-context.types";
-export * from "./config.types";
-export * from "./logger.types";
-export * from "./password.types";
-export * from "./permission.types";
-export * from "./rate-limit.types";
-export * from "./session.types";
-export * from "./tenant-member.types";
-export * from "./tenant.types";
-export * from "./token.types";
-export * from "./user.types";

package/dist/types/index.js

@@ -1,12 +0,0 @@
-export * from "./auth-api.types";
-export * from "./auth-context.types";
-export * from "./config.types";
-export * from "./logger.types";
-export * from "./password.types";
-export * from "./permission.types";
-export * from "./rate-limit.types";
-export * from "./session.types";
-export * from "./tenant-member.types";
-export * from "./tenant.types";
-export * from "./token.types";
-export * from "./user.types";

package/dist/types/logger.types.d.ts

@@ -1,6 +0,0 @@
-export type LoggerService = {
-    debug(message: string, context?: Record<string, unknown>): void;
-    info(message: string, context?: Record<string, unknown>): void;
-    warn(message: string, context?: Record<string, unknown>): void;
-    error(message: string, context?: Record<string, unknown>): void;
-};

package/dist/types/logger.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/password.types.d.ts

@@ -1,4 +0,0 @@
-export type PasswordValidationResult = {
-    valid: boolean;
-    errors: string[];
-};

package/dist/types/password.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/permission.types.d.ts

@@ -1,6 +0,0 @@
-export type ResourceAction = {
-    resource: string;
-    action: string;
-};
-export type PermissionCheckFn = (userId: string, resource: string, action: string) => Promise<void>;
-export type TenantPermissionCheckFn = (userId: string, tenantId: string, resource: string, action: string) => Promise<void>;

package/dist/types/permission.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/rate-limit.types.d.ts

@@ -1,4 +0,0 @@
-export type RateLimitConfig = {
-    windowSeconds: number;
-    maxRequests: number;
-};

package/dist/types/rate-limit.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/session.types.d.ts

@@ -1,21 +0,0 @@
-export type Session = {
-    id: string;
-    userId: string;
-    tenantId: string;
-    refreshTokenHash: string;
-    deviceInfo: string | null;
-    ipAddress: string | null;
-    userAgent: string | null;
-    expiresAt: string;
-    createdAt: string;
-};
-export type CreateSessionInput = {
-    userId: string;
-    tenantId: string;
-    refreshTokenHash: string;
-    deviceInfo?: string;
-    ipAddress?: string;
-    userAgent?: string;
-    expiresAt: string;
-};
-export type SessionInfo = Session;

package/dist/types/session.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/tenant-member.types.d.ts

@@ -1,13 +0,0 @@
-export type TenantMemberRole = "owner" | "admin" | "member";
-export type TenantMember = {
-    id: string;
-    tenantId: string;
-    userId: string;
-    role: TenantMemberRole;
-    joinedAt: string;
-};
-export type CreateTenantMemberInput = {
-    tenantId: string;
-    userId: string;
-    role?: TenantMemberRole;
-};

package/dist/types/tenant-member.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/tenant.types.d.ts

@@ -1,22 +0,0 @@
-export type TenantStatus = "active" | "suspended";
-export type Tenant = {
-    id: string;
-    name: string;
-    slug: string;
-    status: TenantStatus;
-    maxUsers: number;
-    settings: string | null;
-    createdAt: string;
-    updatedAt: string;
-};
-export type CreateTenantInput = {
-    name: string;
-    slug: string;
-    maxUsers?: number;
-    settings?: string;
-};
-export type UpdateTenantInput = {
-    name?: string;
-    maxUsers?: number;
-    settings?: string;
-};

package/dist/types/tenant.types.js

@@ -1 +0,0 @@
-export {};

package/dist/types/token.types.d.ts

@@ -1,24 +0,0 @@
-export type AccessTokenPayload = {
-    sub: string;
-    type: "access";
-    tenantId?: string;
-    iss?: string;
-    aud?: string;
-    jti?: string;
-    roles?: string[];
-    permissions?: string[];
-};
-export type RefreshTokenPayload = {
-    sub: string;
-    sessionId: string;
-    type: "refresh";
-};
-export type PasswordResetTokenPayload = {
-    sub: string;
-    type: "password_reset";
-};
-export type MfaPendingTokenPayload = {
-    sub: string;
-    type: "mfa_pending";
-};
-export type TokenPayload = AccessTokenPayload | RefreshTokenPayload | PasswordResetTokenPayload | MfaPendingTokenPayload;

package/dist/types/token.types.js

@@ -1 +0,0 @@
-export {};