@ploykit/ui 0.0.0-stage → 0.1.1

package/dist/pages/LandingPage.d.ts

@@ -0,0 +1,22 @@
+export interface Feature {
+    icon: string;
+    title: string;
+    desc: string;
+}
+export interface Plan {
+    name: string;
+    price: string;
+    period?: string;
+    recommended?: boolean;
+    features: string[];
+    cta: string;
+}
+export declare function LandingPage({ brand, tagline, description, features, plans, registerPath, loginPath }: {
+    brand: string;
+    tagline: string;
+    description: string;
+    features: Feature[];
+    plans: Plan[];
+    registerPath?: string;
+    loginPath?: string;
+}): import("react").JSX.Element;

package/dist/pages/LandingPage.js

@@ -0,0 +1,5 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Link } from 'react-router';
+export function LandingPage({ brand, tagline, description, features, plans, registerPath = '/register', loginPath = '/login' }) {
+    return (_jsxs("div", { className: "min-h-screen bg-white", children: [_jsx("header", { className: "border-b border-gray-100", children: _jsxs("div", { className: "max-w-6xl mx-auto px-4 h-16 flex items-center justify-between", children: [_jsx("span", { className: "text-xl font-bold text-gray-900", children: brand }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx(Link, { to: loginPath, className: "px-4 py-2 text-sm font-medium text-gray-700 rounded-lg hover:bg-gray-50", children: "\u767B\u5F55" }), _jsx(Link, { to: registerPath, className: "px-4 py-2 bg-blue-600 text-white text-sm font-medium rounded-lg hover:bg-blue-700", children: "\u514D\u8D39\u6CE8\u518C" })] })] }) }), _jsxs("section", { className: "max-w-6xl mx-auto px-4 pt-20 pb-16 text-center", children: [_jsx("h1", { className: "text-5xl font-bold text-gray-900 tracking-tight", children: tagline }), _jsx("p", { className: "mt-4 text-xl text-gray-500 max-w-2xl mx-auto", children: description }), _jsx(Link, { to: registerPath, className: "mt-8 inline-block px-6 py-3 bg-blue-600 text-white font-medium rounded-lg hover:bg-blue-700 text-lg", children: "\u514D\u8D39\u5F00\u59CB" })] }), _jsx("section", { className: "bg-gray-50 py-16", children: _jsxs("div", { className: "max-w-6xl mx-auto px-4", children: [_jsx("h2", { className: "text-3xl font-bold text-center text-gray-900 mb-12", children: "\u6838\u5FC3\u529F\u80FD" }), _jsx("div", { className: "grid md:grid-cols-3 gap-8", children: features.map((f, i) => (_jsxs("div", { className: "p-6 bg-white rounded-xl border border-gray-200", children: [_jsx("div", { className: "text-3xl mb-3", children: f.icon }), _jsx("h3", { className: "text-lg font-semibold text-gray-900", children: f.title }), _jsx("p", { className: "mt-2 text-sm text-gray-500 leading-relaxed", children: f.desc })] }, `${i}-${f.title}`))) })] }) }), _jsx("section", { className: "py-16", children: _jsxs("div", { className: "max-w-6xl mx-auto px-4", children: [_jsx("h2", { className: "text-3xl font-bold text-center text-gray-900 mb-12", children: "\u5B9A\u4EF7" }), _jsx("div", { className: "grid md:grid-cols-2 gap-8 max-w-3xl mx-auto", children: plans.map((p, i) => (_jsxs("div", { className: `p-8 bg-white rounded-xl ${p.recommended ? 'border-2 border-blue-600 relative' : 'border border-gray-200'}`, children: [p.recommended && (_jsx("span", { className: "absolute -top-3 left-1/2 -translate-x-1/2 px-3 py-1 bg-blue-600 text-white text-xs font-medium rounded-full", children: "\u63A8\u8350" })), _jsx("h3", { className: "text-lg font-semibold text-gray-900", children: p.name }), _jsxs("p", { className: "mt-1 text-3xl font-bold text-gray-900", children: [p.price, _jsx("span", { className: "text-sm text-gray-400", children: p.period ?? '/月' })] }), _jsx("ul", { className: "mt-6 space-y-3 text-sm text-gray-600", children: p.features.map((f, j) => _jsxs("li", { children: ["\u2713 ", f] }, `${j}-${f}`)) }), _jsx(Link, { to: registerPath, className: `mt-6 block text-center py-2.5 rounded-lg font-medium ${p.recommended ? 'bg-blue-600 text-white hover:bg-blue-700' : 'border border-gray-300 text-gray-700 hover:bg-gray-50'}`, children: p.cta })] }, `${i}-${p.name}`))) })] }) }), _jsxs("footer", { className: "border-t border-gray-100 py-8 text-center text-sm text-gray-400", children: ["\u00A9 2026 ", brand, ". All rights reserved."] })] }));
+}

package/dist/pages/LoginPage.d.ts

@@ -0,0 +1,15 @@
+export interface OAuthProviderOption {
+    id: string;
+    label: string;
+}
+export declare function loginRedirectTarget(from: unknown, fallback?: string): string;
+export interface LoginPageProps {
+    resetPath?: string;
+    registerPath?: string;
+    oauthProviders?: OAuthProviderOption[];
+    enableFedLogin?: boolean;
+    onSuccess?: () => void;
+    title?: string;
+    description?: string;
+}
+export declare function LoginPage({ resetPath, registerPath, oauthProviders, enableFedLogin, onSuccess, title, description, }: LoginPageProps): import("react").JSX.Element;

package/dist/pages/LoginPage.js

@@ -0,0 +1,87 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { useLocation } from 'react-router';
+import { useLogin } from '../hooks/useLogin';
+import { useApi } from '../hooks/useApi';
+import { useAuth } from '../hooks/useAuth';
+import { Tabs, TabsList, TabsTrigger, TabsContent } from '../components/ui/tabs';
+import { Button } from '../components/ui/Button';
+import { Input } from '../components/ui/Input';
+import { FormField } from '../components/FormField';
+import { apiErrorMessage } from '../lib/api-error';
+const SEND_COOLDOWN_S = 60;
+export function loginRedirectTarget(from, fallback = '/app') {
+    if (typeof from !== 'string')
+        return fallback;
+    if (!from.startsWith('/') || from.startsWith('//'))
+        return fallback;
+    return from;
+}
+export function LoginPage({ resetPath = '/forgot-password', registerPath = '/register', oauthProviders = [], enableFedLogin = false, onSuccess, title = '登录', description = '登录你的账号', }) {
+    const { submit, loading, error: codeError } = useLogin();
+    const api = useApi();
+    const { refresh } = useAuth();
+    const from = loginRedirectTarget(useLocation().state?.from);
+    const [email, setEmail] = useState('');
+    const [code, setCode] = useState('');
+    const [codeSent, setCodeSent] = useState(false);
+    const [sending, setSending] = useState(false);
+    const [sendError, setSendError] = useState(null);
+    const [cooldown, setCooldown] = useState(0);
+    useEffect(() => {
+        if (cooldown <= 0)
+            return;
+        const t = setInterval(() => setCooldown((c) => c - 1), 1_000);
+        return () => clearInterval(t);
+    }, [cooldown]);
+    const [password, setPassword] = useState('');
+    const [pwLoading, setPwLoading] = useState(false);
+    const [pwError, setPwError] = useState(null);
+    const succeed = onSuccess ?? (() => { window.location.href = from; });
+    const handleSendCode = async () => {
+        if (!email || sending || cooldown > 0)
+            return;
+        setSending(true);
+        setSendError(null);
+        try {
+            await api.post('/auth/send-code', { email });
+            setCodeSent(true);
+            setCooldown(SEND_COOLDOWN_S);
+        }
+        catch (e) {
+            setSendError(apiErrorMessage(e, '验证码发送失败，请稍后重试'));
+        }
+        finally {
+            setSending(false);
+        }
+    };
+    const handleCodeSubmit = async (e) => {
+        e.preventDefault();
+        const result = await submit(email, code);
+        if (result.ok)
+            succeed();
+    };
+    const handlePasswordSubmit = async (e) => {
+        e.preventDefault();
+        setPwError(null);
+        setPwLoading(true);
+        try {
+            await api.post('/auth/login', { email, password });
+            await refresh();
+            succeed();
+        }
+        catch (err) {
+            setPwError(apiErrorMessage(err, '登录失败'));
+        }
+        finally {
+            setPwLoading(false);
+        }
+    };
+    return (_jsx("div", { className: "min-h-screen flex items-center justify-center bg-gray-50", children: _jsxs("div", { className: "w-full max-w-sm space-y-4 p-8 bg-white rounded-lg shadow", children: [_jsxs("div", { className: "text-center", children: [_jsx("h1", { className: "text-2xl font-bold", children: title }), _jsx("p", { className: "mt-1 text-sm text-gray-500", children: description })] }), _jsxs(Tabs, { defaultValue: "code", children: [_jsxs(TabsList, { className: "w-full", children: [_jsx(TabsTrigger, { value: "code", children: "\u9A8C\u8BC1\u7801\u767B\u5F55" }), _jsx(TabsTrigger, { value: "password", children: "\u5BC6\u7801\u767B\u5F55" })] }), _jsx(TabsContent, { value: "code", children: _jsxs("form", { onSubmit: handleCodeSubmit, className: "space-y-4 pt-2", children: [_jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: "login-email", className: "text-sm text-gray-600", children: "\u90AE\u7BB1" }), _jsx("input", { id: "login-email", type: "email", value: email, onChange: (e) => setEmail(e.target.value), placeholder: "you@example.com", required: true, autoComplete: "email", className: "w-full px-3 py-2 border rounded-md focus:outline-none focus:ring-2 focus:ring-blue-500" })] }), _jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: "login-code", className: "text-sm text-gray-600", children: "\u9A8C\u8BC1\u7801" }), _jsxs("div", { className: "flex gap-2", children: [_jsx("input", { id: "login-code", type: "text", value: code, onChange: (e) => setCode(e.target.value), placeholder: "6\u4F4D\u6570\u5B57", maxLength: 6, required: true, autoComplete: "one-time-code", className: "flex-1 px-3 py-2 border rounded-md focus:outline-none focus:ring-2 focus:ring-blue-500" }), _jsx("button", { type: "button", onClick: handleSendCode, disabled: sending || cooldown > 0 || !email, className: "px-4 py-2 text-sm text-blue-600 border border-blue-300 rounded-md hover:bg-blue-50 disabled:opacity-50", children: cooldown > 0
+                                                            ? `重发（${cooldown}s）`
+                                                            : codeSent
+                                                                ? '重新发送'
+                                                                : sending
+                                                                    ? '发送中…'
+                                                                    : '发送' })] })] }), sendError && _jsx("p", { role: "alert", className: "text-red-500 text-sm", children: sendError }), codeError && _jsx("p", { role: "alert", className: "text-red-500 text-sm", children: codeError }), _jsx("button", { type: "submit", disabled: loading || !email || !code, className: "w-full py-2 px-4 bg-blue-600 text-white rounded-md hover:bg-blue-700 disabled:opacity-50", children: loading ? '登录中…' : '登录' })] }) }), _jsx(TabsContent, { value: "password", children: _jsxs("form", { onSubmit: handlePasswordSubmit, className: "space-y-4 pt-2", children: [_jsx(FormField, { label: "\u90AE\u7BB1", htmlFor: "login-pw-email", children: _jsx(Input, { id: "login-pw-email", type: "email", value: email, required: true, onChange: (e) => setEmail(e.target.value), placeholder: "you@example.com", autoComplete: "email" }) }), _jsx(FormField, { label: "\u5BC6\u7801", htmlFor: "login-pw-password", children: _jsx(Input, { id: "login-pw-password", type: "password", value: password, required: true, onChange: (e) => setPassword(e.target.value), placeholder: "\u8F93\u5165\u5BC6\u7801", autoComplete: "current-password" }) }), pwError && _jsx("p", { role: "alert", className: "text-red-500 text-sm", children: pwError }), _jsx(Button, { type: "submit", className: "w-full", disabled: pwLoading || !email || !password, children: pwLoading ? '登录中…' : '登录' })] }) })] }), oauthProviders.length > 0 && (_jsxs("div", { className: "space-y-2 pt-1", "data-testid": "oauth-providers", children: [_jsxs("div", { className: "relative py-2 text-center", children: [_jsx("span", { className: "absolute inset-x-0 top-1/2 border-t border-gray-200" }), _jsx("span", { className: "relative z-10 bg-white px-2 text-xs text-gray-400", children: "\u6216\u4F7F\u7528\u4EE5\u4E0B\u65B9\u5F0F\u767B\u5F55" })] }), oauthProviders.map((p) => (_jsxs("a", { href: '/auth/oauth/' + p.id + '/start', className: "block w-full py-2 px-4 text-center text-sm border border-gray-300 rounded-md hover:bg-gray-50", children: ["\u4F7F\u7528 ", p.label, " \u767B\u5F55"] }, p.id)))] })), enableFedLogin && (_jsxs("details", { className: "pt-1", "data-testid": "fed-login", children: [_jsx("summary", { className: "text-sm text-gray-500 cursor-pointer select-none", children: "\u4F01\u4E1A\u767B\u5F55" }), _jsxs("form", { method: "get", action: "/auth/fed/start", className: "mt-2 space-y-2", children: [_jsx("input", { type: "text", name: "workspace", placeholder: "\u5DE5\u4F5C\u533A\u6807\u8BC6\uFF08slug\uFF09", required: true, className: "w-full px-3 py-2 border rounded-md focus:outline-none focus:ring-2 focus:ring-blue-500" }), _jsx("button", { type: "submit", className: "w-full py-2 px-4 bg-gray-800 text-white text-sm rounded-md hover:bg-gray-900", children: "\u901A\u8FC7\u4F01\u4E1A IdP \u767B\u5F55" })] })] })), _jsxs("div", { className: "flex items-center justify-between text-sm", children: [_jsx("a", { href: resetPath, className: "text-blue-600 hover:underline", children: "\u5FD8\u8BB0\u5BC6\u7801\uFF1F" }), registerPath && (_jsx("a", { href: registerPath, "data-testid": "register-link", className: "text-blue-600 hover:underline", children: "\u521B\u5EFA\u8D26\u53F7" }))] })] }) }));
+}

package/dist/pages/account/NotificationPreferencesPage.d.ts

@@ -0,0 +1,13 @@
+export interface NotificationTypeMeta {
+    type: string;
+    label: string;
+    description?: string;
+}
+export interface NotificationPreferencesPageProps {
+    types?: NotificationTypeMeta[];
+    title?: string;
+    description?: string;
+    siteName?: string;
+    emailChannelNote?: string;
+}
+export declare function NotificationPreferencesPage({ types, title, description, siteName, emailChannelNote, }: NotificationPreferencesPageProps): import("react").JSX.Element;

package/dist/pages/account/NotificationPreferencesPage.js

@@ -0,0 +1,41 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useId } from 'react';
+import { PageHeader, PageLoading, PageError, PageEmpty } from '../../components/Page';
+import { Switch } from '../../components/ui/switch';
+import { toast } from '../../components/toast';
+import { useSEO } from '../../hooks/useSEO';
+import { useNotificationPrefs, useSetNotificationPref, } from '../../hooks/useNotificationPrefs';
+export function NotificationPreferencesPage({ types, title = '通知偏好', description = '选择每种通知的接收渠道；未显示的类型默认全部开启', siteName, emailChannelNote, }) {
+    const { prefs, loading, error, refetch } = useNotificationPrefs();
+    const { setPref } = useSetNotificationPref();
+    const uid = useId();
+    useSEO({ title: siteName ? `${title} · ${siteName}` : title });
+    if (loading)
+        return _jsxs("div", { children: [_jsx(PageHeader, { title: title, description: description }), _jsx(PageLoading, {})] });
+    if (error) {
+        return (_jsxs("div", { children: [_jsx(PageHeader, { title: title, description: description }), _jsx(PageError, { message: error instanceof Error ? error.message : '偏好加载失败', onRetry: () => refetch() })] }));
+    }
+    const byType = new Map(prefs.map((p) => [p.notification_type, p]));
+    const list = types ?? prefs.map((p) => ({ type: p.notification_type, label: p.notification_type }));
+    if (list.length === 0) {
+        return (_jsxs("div", { children: [_jsx(PageHeader, { title: title, description: description }), _jsx(PageEmpty, { label: "\u6682\u65E0\u53EF\u914D\u7F6E\u7684\u901A\u77E5\u7C7B\u578B", hint: "\u901A\u77E5\u7C7B\u578B\u76EE\u5F55\u7531\u670D\u52A1\u7AEF\u4E0B\u53D1\uFF1A\u9996\u6B21\u4EA7\u751F\u901A\u77E5\u8BBE\u7F6E\uFF08\u6216\u540E\u7AEF\u63A5\u5165\u7C7B\u578B\u76EE\u5F55\u63A5\u53E3\uFF09\u540E\uFF0C\u4F1A\u51FA\u73B0\u5728\u8FD9\u91CC\uFF1B\u9ED8\u8BA4\u6240\u6709\u901A\u77E5\u53CC\u6E20\u9053\u5F00\u542F\u3002" })] }));
+    }
+    const toggle = async (type, channel, next) => {
+        try {
+            await setPref(type, { [channel]: next });
+        }
+        catch (e) {
+            toast.error(e instanceof Error ? e.message : '保存失败');
+        }
+    };
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: title, description: description }), _jsxs("div", { className: "w-full max-w-4xl space-y-4", children: [emailChannelNote && (_jsxs("p", { className: "text-sm text-muted-foreground", children: ["\u90AE\u4EF6\u6E20\u9053\uFF1A", emailChannelNote] })), list.map(({ type, label, description: desc }) => {
+                        const row = byType.get(type);
+                        const inApp = row?.in_app_enabled ?? true;
+                        const email = row?.email_enabled ?? true;
+                        const inAppInputId = `${uid}-${type}-in-app`;
+                        const emailInputId = `${uid}-${type}-email`;
+                        const inAppLabelId = `${inAppInputId}-label`;
+                        const emailLabelId = `${emailInputId}-label`;
+                        return (_jsxs("div", { className: "flex flex-row items-center justify-between gap-4 rounded-lg border p-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "text-sm font-medium", children: label }), desc && _jsx("p", { className: "mt-0.5 text-sm text-muted-foreground", children: desc })] }), _jsxs("div", { className: "flex shrink-0 items-center gap-5", children: [_jsxs("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsxs("label", { id: inAppLabelId, htmlFor: inAppInputId, className: "cursor-pointer select-none", children: ["\u7AD9\u5185", _jsxs("span", { className: "sr-only", children: ["\uFF08", label, "\uFF09"] })] }), _jsx(Switch, { id: inAppInputId, "aria-labelledby": inAppLabelId, checked: inApp, onCheckedChange: (v) => toggle(type, 'in_app_enabled', v) })] }), _jsxs("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsxs("label", { id: emailLabelId, htmlFor: emailInputId, className: "cursor-pointer select-none", children: ["\u90AE\u4EF6", _jsxs("span", { className: "sr-only", children: ["\uFF08", label, "\uFF09"] })] }), _jsx(Switch, { id: emailInputId, "aria-labelledby": emailLabelId, checked: email, onCheckedChange: (v) => toggle(type, 'email_enabled', v) })] })] })] }, type));
+                    })] })] }));
+}

package/dist/pages/account/ProfileSettingsPage.d.ts

@@ -0,0 +1,4 @@
+export interface ProfileSettingsPageProps {
+    onDeleted?: () => void;
+}
+export declare function ProfileSettingsPage({ onDeleted }: ProfileSettingsPageProps): import("react").JSX.Element;

package/dist/pages/account/ProfileSettingsPage.js

@@ -0,0 +1,96 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useState } from 'react';
+import { z } from 'zod';
+import { PageHeader, PageLoading, PageError } from '../../components/Page';
+import { SettingsCard } from '../../components/SettingsCard';
+import { FormField } from '../../components/FormField';
+import { Button } from '../../components/ui/Button';
+import { Input } from '../../components/ui/Input';
+import { Badge } from '../../components/ui/Badge';
+import { ImpactConfirmation } from '../../components/SecretModal';
+import { toast } from '../../components/toast';
+import { apiErrorMessage } from '../../lib/api-error';
+import { useApi } from '../../hooks/useApi';
+import { useAuth } from '../../hooks/useAuth';
+import { useZodForm } from '../../hooks/useZodForm';
+const profileSchema = z.object({
+    display_name: z.string().trim().min(1, '请输入昵称').max(100, '昵称最多 100 字符'),
+    avatar_url: z.string()
+        .refine((v) => v === '' || /^https?:\/\//.test(v), '头像链接需以 http(s):// 开头')
+        .refine((v) => v === '' || v.length <= 2048, '头像链接最多 2048 字符'),
+});
+export function ProfileSettingsPage({ onDeleted }) {
+    const { user, loading, refresh, logout } = useAuth();
+    const api = useApi();
+    const [saving, setSaving] = useState(false);
+    const [sending, setSending] = useState(false);
+    const [deleting, setDeleting] = useState(false);
+    const [confirmEmail, setConfirmEmail] = useState('');
+    const [confirmOpen, setConfirmOpen] = useState(false);
+    const form = useZodForm({
+        schema: profileSchema,
+        defaultValues: { display_name: user?.display_name ?? '', avatar_url: user?.avatar_url ?? '' },
+        values: user
+            ? { display_name: user.display_name, avatar_url: user.avatar_url ?? '' }
+            : undefined, // 用户数据到达后同步进表单（保留已输入内容的 RHF 回退语义）
+    });
+    if (loading)
+        return _jsx(PageLoading, { label: "\u52A0\u8F7D\u8D26\u53F7\u4FE1\u606F\u2026" });
+    if (!user) {
+        return _jsx(PageError, { message: "\u672A\u767B\u5F55\u6216\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55", onRetry: () => refresh() });
+    }
+    const handleSave = form.handleSubmit(async (values) => {
+        setSaving(true);
+        try {
+            await api.patch('/auth/me', {
+                display_name: values.display_name,
+                avatar_url: values.avatar_url,
+            });
+            await refresh();
+            toast.success('资料已更新');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '保存失败'));
+        }
+        finally {
+            setSaving(false);
+        }
+    });
+    const handleResend = async () => {
+        setSending(true);
+        try {
+            await api.post('/auth/send-verification');
+            toast.success('验证邮件已发送，请查收');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '发送失败'));
+        }
+        finally {
+            setSending(false);
+        }
+    };
+    const handleDelete = async () => {
+        setDeleting(true);
+        try {
+            await api.delete('/auth/me');
+            if (onDeleted)
+                onDeleted();
+            else {
+                await logout();
+                window.location.href = '/login';
+            }
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '注销失败'));
+        }
+        finally {
+            setDeleting(false);
+        }
+    };
+    const emailReadyToDelete = confirmEmail.trim().toLowerCase() === user.email.toLowerCase();
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: "\u4E2A\u4EBA\u8D44\u6599", description: "\u7BA1\u7406\u6635\u79F0\u3001\u5934\u50CF\u7B49\u8D26\u53F7\u8D44\u6599" }), _jsxs(SettingsCard, { title: "\u8D44\u6599", description: "\u5BF9\u5916\u5C55\u793A\u7684\u6635\u79F0\u4E0E\u5934\u50CF", cta: _jsx(Button, { type: "submit", form: "profile-form", disabled: saving, children: saving ? '保存中…' : '保存' }), children: [_jsxs("form", { id: "profile-form", onSubmit: handleSave, className: "max-w-xl space-y-4", children: [_jsx(FormField, { label: "\u6635\u79F0", required: true, error: form.formState.errors.display_name?.message, htmlFor: "profile-name", children: _jsx(Input, { id: "profile-name", maxLength: 100, placeholder: "\u600E\u4E48\u79F0\u547C\u4F60", ...form.register('display_name') }) }), _jsx(FormField, { label: "\u5934\u50CF\u94FE\u63A5", error: form.formState.errors.avatar_url?.message, htmlFor: "profile-avatar", description: "\u53EF\u9009\uFF1B\u9700 http(s):// \u5F00\u5934\u3001\u6700\u591A 2048 \u5B57\u7B26\u3002\u5916\u90E8\u56FE\u7247\u53EF\u80FD\u88AB\u5185\u5BB9\u5B89\u5168\u7B56\u7565\u62E6\u622A\uFF0C\u65E0\u6CD5\u52A0\u8F7D\u65F6\u663E\u793A\u9ED8\u8BA4\u5934\u50CF", children: _jsx(Input, { id: "profile-avatar", maxLength: 2048, placeholder: "https://\u2026\uFF08\u53EF\u9009\uFF09", ...form.register('avatar_url') }) })] }), _jsxs("div", { className: "mt-6 flex flex-row items-center justify-between gap-4 rounded-lg border p-4", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "text-sm font-medium", children: "\u767B\u5F55\u90AE\u7BB1" }), _jsx("p", { className: "mt-0.5 truncate text-sm text-muted-foreground", "data-testid": "profile-email", children: user.email }), _jsx("p", { className: "mt-1 text-xs text-muted-foreground", children: "\u7528\u4E8E\u767B\u5F55\u4E0E\u63A5\u6536\u901A\u77E5\uFF0C\u6682\u4E0D\u652F\u6301\u81EA\u52A9\u4FEE\u6539" })] }), _jsx("div", { className: "flex shrink-0 items-center gap-2", children: user.email_verified ? (_jsx(Badge, { variant: "secondary", className: "bg-emerald-50 text-emerald-700 border-emerald-200", children: "\u5DF2\u9A8C\u8BC1" })) : (_jsxs(_Fragment, { children: [_jsx(Badge, { variant: "outline", className: "text-amber-700 border-amber-200 bg-amber-50", children: "\u672A\u9A8C\u8BC1" }), _jsx(Button, { variant: "outline", size: "sm", onClick: handleResend, disabled: sending, children: sending ? '发送中…' : '重新发送验证邮件' })] })) })] })] }), _jsx(SettingsCard, { danger: true, title: "\u5220\u9664\u8D26\u53F7", description: "\u6CE8\u9500\u540E\u8D26\u53F7\u8FDB\u5165\u5220\u9664\u72B6\u6001\uFF0C\u65E0\u6CD5\u6062\u590D", cta: _jsx(Button, { variant: "destructive", disabled: !emailReadyToDelete || deleting, onClick: () => setConfirmOpen(true), children: "\u5220\u9664\u8D26\u53F7" }), children: _jsx("div", { className: "max-w-xl space-y-4", children: _jsx(FormField, { label: "\u8F93\u5165\u767B\u5F55\u90AE\u7BB1\u4EE5\u786E\u8BA4", htmlFor: "profile-delete-email", children: _jsx(Input, { id: "profile-delete-email", placeholder: user.email, value: confirmEmail, onChange: (e) => setConfirmEmail(e.target.value) }) }) }) }), _jsx(ImpactConfirmation, { open: confirmOpen, onOpenChange: setConfirmOpen, onConfirm: handleDelete, title: "\u786E\u8BA4\u5220\u9664\u8D26\u53F7\uFF1F", confirmText: "\u6C38\u4E45\u5220\u9664", danger: true, impacts: [
+                    '账号进入 deleted 状态，邮箱被释放（可用同邮箱重新注册）',
+                    '所有会话立即失效并吊销全部个人访问令牌（PAT）',
+                    '昵称、头像等资料被清空，操作不可恢复',
+                ] })] }));
+}

package/dist/pages/account/SecuritySettingsPage.d.ts

@@ -0,0 +1 @@
+export declare function SecuritySettingsPage(): import("react").JSX.Element;

package/dist/pages/account/SecuritySettingsPage.js

@@ -0,0 +1,134 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { z } from 'zod';
+import { PageHeader, PageError } from '../../components/Page';
+import { SettingsCard } from '../../components/SettingsCard';
+import { FormField } from '../../components/FormField';
+import { Button } from '../../components/ui/Button';
+import { Input } from '../../components/ui/Input';
+import { Badge } from '../../components/ui/Badge';
+import { DataTable } from '../../components/DataTable';
+import { ImpactConfirmation } from '../../components/SecretModal';
+import { useConfirm } from '../../components/ConfirmDialog';
+import { toast } from '../../components/toast';
+import { useApi } from '../../hooks/useApi';
+import { useAuth } from '../../hooks/useAuth';
+import { useZodForm } from '../../hooks/useZodForm';
+import { useSessions, useRevokeSession, useRevokeAllSessions } from '../../hooks/useSessions';
+import { passwordSchema } from '../auth/RegisterPage';
+import { apiErrorMessage } from '../../lib/api-error';
+import { formatDateTime, shortID } from '../../lib/utils';
+const changePwSchema = z
+    .object({
+    old_password: z.string().min(1, '请输入当前密码'),
+    new_password: passwordSchema,
+})
+    // B4（ui-audit-10pages §4.2，S3）：new==old 客户端拦截——相同值提交后端会
+    // 判定通过并"成功"改密，顺带静默吊销全部会话（服务端无 new==old 校验，
+    // 半边 ➡️U1 identity 归属）。跨字段校验须挂对象级 refine（字段级拿不到 old）；
+    // zod 语义：字段规则全过才跑 refine，old 为空时不会叠加误导性报错。
+    .superRefine((v, ctx) => {
+    if (v.old_password !== '' && v.new_password === v.old_password) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['new_password'],
+            message: '新密码不能与当前密码相同',
+        });
+    }
+});
+function truncate(s, max = 32) {
+    return s.length > max ? s.slice(0, max) + '…' : s;
+}
+export function SecuritySettingsPage() {
+    const api = useApi();
+    const { refresh, logout } = useAuth();
+    const confirm = useConfirm();
+    const { sessions, loading, error, refetch } = useSessions();
+    const { revoke } = useRevokeSession();
+    const { revokeAll } = useRevokeAllSessions();
+    const [saving, setSaving] = useState(false);
+    const [revokingAll, setRevokingAll] = useState(false);
+    const [confirmAllOpen, setConfirmAllOpen] = useState(false);
+    const form = useZodForm({
+        schema: changePwSchema,
+        defaultValues: { old_password: '', new_password: '' },
+    });
+    const handleChangePw = form.handleSubmit(async (values) => {
+        setSaving(true);
+        try {
+            await api.post('/auth/change-password', {
+                old_password: values.old_password,
+                new_password: values.new_password,
+            });
+            toast.success('密码已修改，其他设备可能需要重新登录');
+            form.reset();
+            await refresh();
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '修改失败'));
+        }
+        finally {
+            setSaving(false);
+        }
+    });
+    const handleRevoke = async (s) => {
+        const ok = await confirm({
+            title: '吊销此会话？',
+            description: s.current ? '这是当前设备，吊销后需要重新登录。' : truncate(s.user_agent),
+            confirmText: '吊销',
+            danger: true,
+        });
+        if (!ok)
+            return;
+        try {
+            await revoke(s.id);
+            if (s.current) {
+                toast.success('已吊销当前会话，即将返回登录页');
+                await logout();
+                window.location.href = '/login';
+                return;
+            }
+            toast.success('会话已吊销');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '吊销失败'));
+        }
+    };
+    const handleRevokeAll = async () => {
+        setRevokingAll(true);
+        try {
+            await revokeAll();
+            toast.success('已吊销全部会话');
+            window.location.href = '/login';
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '吊销失败'));
+            setRevokingAll(false);
+        }
+    };
+    const columns = [
+        {
+            key: 'user_agent', header: '设备',
+            render: (s) => (_jsx("span", { title: s.user_agent, className: "text-muted-foreground inline-block max-w-64 truncate", children: truncate(s.user_agent) })),
+        },
+        {
+            key: 'ip_hash', header: 'IP（哈希）',
+            render: (s) => _jsx("span", { title: s.ip_hash, className: "font-mono text-xs", children: shortID(s.ip_hash, 10) }),
+        },
+        { key: 'last_seen_at', header: '最近活跃', render: (s) => formatDateTime(s.last_seen_at) },
+        { key: 'expires_at', header: '过期时间', render: (s) => formatDateTime(s.expires_at) },
+        {
+            key: 'current', header: '当前',
+            render: (s) => s.current === undefined ? (_jsx("span", { className: "text-muted-foreground", children: "\u2014" })) : s.current ? (_jsx(Badge, { variant: "secondary", className: "bg-emerald-50 text-emerald-700 border-emerald-200", children: "\u5F53\u524D\u8BBE\u5907" })) : (_jsx("span", { className: "text-muted-foreground", children: "\u2014" })),
+        },
+        {
+            key: 'actions', header: '', className: 'text-right',
+            render: (s) => (_jsx(Button, { variant: "ghost", size: "sm", className: "text-destructive", onClick: () => handleRevoke(s), children: "\u540A\u9500" })),
+        },
+    ];
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: "\u8D26\u6237\u5B89\u5168", description: "\u4FEE\u6539\u5BC6\u7801\u5E76\u7BA1\u7406\u5DF2\u767B\u5F55\u8BBE\u5907" }), _jsx(SettingsCard, { title: "\u4FEE\u6539\u5BC6\u7801", description: "\u4FEE\u6539\u540E\u5176\u4ED6\u4F1A\u8BDD\u5C06\u5931\u6548\uFF0C\u9700\u8981\u91CD\u65B0\u767B\u5F55", cta: _jsx(Button, { type: "submit", form: "security-pw-form", disabled: saving, children: saving ? '提交中…' : '修改密码' }), children: _jsxs("form", { id: "security-pw-form", onSubmit: handleChangePw, className: "max-w-xl space-y-4", children: [_jsx(FormField, { label: "\u5F53\u524D\u5BC6\u7801", error: form.formState.errors.old_password?.message, htmlFor: "sec-old", children: _jsx(Input, { id: "sec-old", type: "password", autoComplete: "current-password", ...form.register('old_password') }) }), _jsx(FormField, { label: "\u65B0\u5BC6\u7801", error: form.formState.errors.new_password?.message, htmlFor: "sec-new", children: _jsx(Input, { id: "sec-new", type: "password", placeholder: "\u81F3\u5C11 10 \u4F4D\uFF0C\u542B\u4E09\u7C7B\u5B57\u7B26", autoComplete: "new-password", ...form.register('new_password') }) })] }) }), _jsx(SettingsCard, { title: "\u6D3B\u8DC3\u4F1A\u8BDD", description: "\u6700\u8FD1\u767B\u5F55\u8FC7\u4F60\u8D26\u53F7\u7684\u8BBE\u5907\uFF1B\u53EF\u7591\u4F1A\u8BDD\u8BF7\u7ACB\u5373\u540A\u9500", cta: _jsx(Button, { variant: "destructive", size: "sm", disabled: revokingAll, onClick: () => setConfirmAllOpen(true), children: "\u5168\u90E8\u540A\u9500" }), children: error ? (_jsx(PageError, { message: apiErrorMessage(error, '会话列表加载失败'), onRetry: () => refetch() })) : (_jsx(DataTable, { columns: columns, rows: sessions, rowKey: (s) => s.id, loading: loading, empty: _jsx("div", { className: "py-8 text-center text-sm text-muted-foreground", children: "\u6682\u65E0\u6D3B\u8DC3\u4F1A\u8BDD" }) })) }), _jsx(ImpactConfirmation, { open: confirmAllOpen, onOpenChange: setConfirmAllOpen, onConfirm: handleRevokeAll, title: "\u540A\u9500\u5168\u90E8\u4F1A\u8BDD\uFF1F", confirmText: "\u5168\u90E8\u540A\u9500", danger: true, impacts: [
+                    '所有设备（含当前设备）立即退出登录',
+                    '会话 cookie 被清除，页面将跳转登录页',
+                    '个人访问令牌（PAT）不受影响，仍需单独吊销',
+                ] })] }));
+}

package/dist/pages/account/TokensPage.d.ts

@@ -0,0 +1 @@
+export declare function TokensPage(): import("react").JSX.Element;

package/dist/pages/account/TokensPage.js

@@ -0,0 +1,117 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { PageHeader, PageEmpty } from '../../components/Page';
+import { FormField } from '../../components/FormField';
+import { Button } from '../../components/ui/Button';
+import { Input } from '../../components/ui/Input';
+import { Badge } from '../../components/ui/Badge';
+import { DataTable } from '../../components/DataTable';
+import { SecretModal } from '../../components/SecretModal';
+import { useConfirm } from '../../components/ConfirmDialog';
+import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, } from '../../components/ui/dialog';
+import { toast } from '../../components/toast';
+import { useTokens, useCreateToken, useRevokeToken } from '../../hooks/useTokens';
+import { apiErrorMessage } from '../../lib/api-error';
+import { formatDateTime } from '../../lib/utils';
+const NAME_MAX_BYTES = 64;
+const utf8Bytes = (s) => new TextEncoder().encode(s).length;
+export function TokensPage() {
+    const { tokens, loading, refetch } = useTokens();
+    const { create } = useCreateToken();
+    const { revoke } = useRevokeToken();
+    const confirm = useConfirm();
+    const [createOpen, setCreateOpen] = useState(false);
+    const [name, setName] = useState('');
+    const [nameError, setNameError] = useState(null);
+    const [ttlHours, setTtlHours] = useState('');
+    const [ttlError, setTtlError] = useState(null);
+    const [creating, setCreating] = useState(false);
+    const [secret, setSecret] = useState(null);
+    function parseTtl(raw) {
+        const s = raw.trim();
+        if (s === '')
+            return { ok: true };
+        const n = Number(s);
+        if (!Number.isFinite(n) || !Number.isInteger(n) || n <= 0) {
+            return { ok: false, error: '有效期必须是正整数（小时）；不需要过期时间请留空' };
+        }
+        return { ok: true, hours: n };
+    }
+    const handleCreate = async () => {
+        const trimmed = name.trim();
+        if (!trimmed)
+            return;
+        if (utf8Bytes(trimmed) > NAME_MAX_BYTES) {
+            setNameError(`名称不能超过 64 字节（约 21 个汉字），当前 ${utf8Bytes(trimmed)} 字节`);
+            return;
+        }
+        const ttl = parseTtl(ttlHours);
+        if (!ttl.ok) {
+            setTtlError(ttl.error);
+            return;
+        }
+        setNameError(null);
+        setTtlError(null);
+        setCreating(true);
+        try {
+            const res = await create(trimmed, ttl.hours);
+            setCreateOpen(false);
+            setName('');
+            setTtlHours('');
+            setSecret(res.token);
+            toast.success('令牌已创建');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '创建失败'));
+        }
+        finally {
+            setCreating(false);
+        }
+    };
+    const handleRevoke = async (t) => {
+        const ok = await confirm({
+            title: '吊销此令牌？',
+            description: `使用「${t.name}」（前缀 ${t.prefix}…）的集成将立即失去访问权限。`,
+            confirmText: '吊销',
+            danger: true,
+        });
+        if (!ok)
+            return;
+        try {
+            await revoke(t.id);
+            toast.success('令牌已吊销');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '吊销失败'));
+        }
+    };
+    const columns = [
+        {
+            key: 'name', header: '名称',
+            render: (t) => (_jsx("span", { className: "font-medium block max-w-[16rem] truncate", title: t.name, children: t.name })),
+        },
+        { key: 'prefix', header: '前缀', render: (t) => _jsxs("code", { className: "font-mono text-xs", children: [t.prefix, "\u2026"] }) },
+        {
+            key: 'last_used_at', header: '最近使用',
+            render: (t) => (t.last_used_at ? formatDateTime(t.last_used_at) : _jsx("span", { className: "text-muted-foreground", children: "\u4ECE\u672A\u4F7F\u7528" })),
+        },
+        {
+            key: 'expires_at', header: '过期时间',
+            render: (t) => t.expires_at ? (formatDateTime(t.expires_at)) : (_jsx(Badge, { variant: "outline", children: "\u6C38\u4E0D\u8FC7\u671F" })),
+        },
+        { key: 'created_at', header: '创建时间', render: (t) => formatDateTime(t.created_at) },
+        {
+            key: 'actions', header: '', className: 'text-right',
+            render: (t) => (_jsx(Button, { variant: "ghost", size: "sm", className: "text-destructive", "aria-label": `吊销令牌 ${t.name}`, onClick: () => handleRevoke(t), children: "\u540A\u9500" })),
+        },
+    ];
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: "\u4E2A\u4EBA\u8BBF\u95EE\u4EE4\u724C", description: "\u7528\u4E8E\u811A\u672C\u4E0E API \u96C6\u6210\uFF1B\u660E\u6587\u53EA\u5728\u521B\u5EFA\u65F6\u663E\u793A\u4E00\u6B21", actions: _jsx(Button, { onClick: () => setCreateOpen(true), children: "\u65B0\u5EFA\u4EE4\u724C" }) }), _jsx(DataTable, { columns: columns, rows: tokens, rowKey: (t) => t.id, loading: loading, empty: _jsx(PageEmpty, { label: "\u8FD8\u6CA1\u6709\u4EE4\u724C", hint: "\u521B\u5EFA\u4E00\u4E2A\u4EE4\u724C\uFF0C\u8BA9\u811A\u672C\u4EE5\u4F60\u7684\u8EAB\u4EFD\u8C03\u7528 API" }) }), _jsx(Dialog, { open: createOpen, onOpenChange: setCreateOpen, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: "\u65B0\u5EFA\u4EE4\u724C" }), _jsx(DialogDescription, { children: "\u521B\u5EFA\u540E\u660E\u6587\u53EA\u663E\u793A\u4E00\u6B21\uFF0C\u8BF7\u7ACB\u5373\u4FDD\u5B58\u5230\u5B89\u5168\u7684\u5730\u65B9\u3002" })] }), _jsxs("div", { className: "space-y-4", children: [_jsx(FormField, { label: "\u540D\u79F0", htmlFor: "pat-name", error: nameError ?? undefined, children: _jsx(Input, { id: "pat-name", value: name, onChange: (e) => {
+                                            setName(e.target.value);
+                                            if (nameError)
+                                                setNameError(null);
+                                        }, placeholder: "\u5982\uFF1Aci-deploy", maxLength: 64, autoFocus: true, "aria-invalid": nameError ? true : undefined }) }), _jsx(FormField, { label: "\u6709\u6548\u671F\uFF08\u5C0F\u65F6\uFF0C\u53EF\u9009\uFF09", htmlFor: "pat-ttl", error: ttlError ?? undefined, children: _jsx(Input, { id: "pat-ttl", type: "text", inputMode: "numeric", value: ttlHours, onChange: (e) => {
+                                            setTtlHours(e.target.value);
+                                            if (ttlError)
+                                                setTtlError(null);
+                                        }, placeholder: "\u7559\u7A7A = \u6C38\u4E0D\u8FC7\u671F\uFF08\u4E0D\u5EFA\u8BAE\uFF09", "aria-invalid": ttlError ? true : undefined }) })] }), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setCreateOpen(false), children: "\u53D6\u6D88" }), _jsx(Button, { onClick: handleCreate, disabled: creating || !name.trim(), children: creating ? '创建中…' : '创建' })] })] }) }), _jsx(SecretModal, { open: secret !== null, onOpenChange: (o) => !o && setSecret(null), secretName: "\u4E2A\u4EBA\u8BBF\u95EE\u4EE4\u724C", secretValue: secret ?? '' })] }));
+}

package/dist/pages/admin/AdminSettingsPage.d.ts

@@ -0,0 +1 @@
+export declare function AdminSettingsPage(): import("react").JSX.Element;