@svadmin/core 0.37.0 → 0.39.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svadmin/core",
-  "version": "0.37.0",
+  "version": "0.39.0",
   "author": "zuohuadong",
   "repository": {
     "type": "git",
@@ -14,7 +14,7 @@
     "@testing-library/dom": "^10.4.1",
     "@testing-library/svelte": "^5.4.2",
     "@testing-library/user-event": "^14.6.4",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.0",
     "@types/jsdom": "^30.0.0",
     "happy-dom": "^20.11.2",
     "jsdom": "^30.0.1",

package/src/audit.ts

@@ -2,6 +2,7 @@
 // Full AuditLogProvider interface
 
 export interface AuditEntry {
+  id?: string | number;
   timestamp: string;
   action: 'create' | 'update' | 'delete' | 'login' | 'logout';
   resource?: string;
@@ -11,6 +12,13 @@ export interface AuditEntry {
   data?: Record<string, unknown>;
   previousData?: Record<string, unknown>;
   meta?: Record<string, unknown>;
+  outcome?: 'success' | 'failure';
+  tenantId?: string | number;
+  requestId?: string;
+  traceId?: string;
+  ipAddress?: string;
+  userAgent?: string;
+  error?: { message: string; code?: string };
 }
 
 export type AuditHandler = (entry: AuditEntry) => void | Promise<void>;
@@ -22,9 +30,20 @@ export type AuditHandler = (entry: AuditEntry) => void | Promise<void>;
  * - update: update an existing entry (e.g. mark as reviewed)
  */
 export interface AuditLogProvider {
-  create: (params: { resource: string; action: string; data?: Record<string, unknown>; previousData?: Record<string, unknown>; meta?: Record<string, unknown> }) => Promise<AuditEntry>;
+  create: (params: {
+    resource: string;
+    action: string;
+    timestamp?: string;
+    recordId?: string | number;
+    userId?: string;
+    outcome?: AuditEntry['outcome'];
+    data?: Record<string, unknown>;
+    previousData?: Record<string, unknown>;
+    meta?: Record<string, unknown>;
+  }) => Promise<AuditEntry>;
   get: (params: { resource: string; action?: string; meta?: Record<string, unknown>; author?: Record<string, unknown> }) => Promise<AuditEntry[]>;
-  update: (params: { id: string | number; name: string; meta?: Record<string, unknown> }) => Promise<AuditEntry>;
+  /** @deprecated 合规审计应保持追加写入；仅为旧实现兼容保留。 */
+  update?: (params: { id: string | number; name: string; meta?: Record<string, unknown> }) => Promise<AuditEntry>;
 }
 
 let handler: AuditHandler = (entry) => {
@@ -68,6 +87,10 @@ export function auditWithProvider(
     provider.create({
       resource: entry.resource ?? '',
       action: entry.action,
+      timestamp: fullEntry.timestamp,
+      recordId: entry.recordId,
+      userId: entry.userId,
+      outcome: entry.outcome,
       data: entry.data ?? entry.details,
       previousData: entry.previousData,
       meta: entry.meta,
@@ -78,3 +101,38 @@ export function auditWithProvider(
 export function audit(entry: Omit<AuditEntry, 'timestamp'>): void {
   auditWithProvider(entry, auditLogProvider);
 }
+
+/**
+ * 严格写入审计记录。与兼容的 best-effort `audit` 不同，此函数会等待所有
+ * 写入并传播失败，适合权限、凭据、策略等必须和业务结果一起验证的流程。
+ */
+export async function writeAuditEntry(
+  entry: Omit<AuditEntry, 'timestamp'>,
+  provider: AuditLogProvider | null | undefined = auditLogProvider,
+): Promise<AuditEntry> {
+  const fullEntry: AuditEntry = { ...entry, timestamp: new Date().toISOString() };
+  if (!provider) {
+    throw new Error('Strict audit logging requires an AuditLogProvider.');
+  }
+  await handler(fullEntry);
+  return provider.create({
+    resource: entry.resource ?? '',
+    action: entry.action,
+    timestamp: fullEntry.timestamp,
+    recordId: entry.recordId,
+    userId: entry.userId,
+    outcome: entry.outcome,
+    data: entry.data ?? entry.details,
+    previousData: entry.previousData,
+    meta: {
+      ...(entry.meta ?? {}),
+      ...(entry.outcome === undefined ? {} : { outcome: entry.outcome }),
+      ...(entry.tenantId === undefined ? {} : { tenantId: entry.tenantId }),
+      ...(entry.requestId === undefined ? {} : { requestId: entry.requestId }),
+      ...(entry.traceId === undefined ? {} : { traceId: entry.traceId }),
+      ...(entry.ipAddress === undefined ? {} : { ipAddress: entry.ipAddress }),
+      ...(entry.userAgent === undefined ? {} : { userAgent: entry.userAgent }),
+      ...(entry.error === undefined ? {} : { error: entry.error }),
+    },
+  });
+}

package/src/auth-hooks.svelte.ts

@@ -10,6 +10,7 @@ import type { AuthActionResult, CheckResult, Identity, AuthProvider } from './ty
 import { useQueryClient } from '@tanstack/svelte-query';
 
 let _logoutVersion = $state(0);
+let nextAuthMutationInstanceId = 0;
 export function getLogoutVersion() { return _logoutVersion; }
 export function resetLogoutVersion() { _logoutVersion = 0; }
 
@@ -22,7 +23,21 @@ interface CreateAuthMutationOptions {
   onSuccess?: (result: AuthActionResult, adminContext: AdminContextAccessor) => void | Promise<void>;
 }
 
+export interface AuthNotificationOptions {
+  /** Set to false when the page owns the success state. */
+  successNotification?: string | false;
+  errorNotification?: string | false;
+}
+
+function resolveSuccessMessage(
+  configured: string | false | undefined,
+  defaultMessage: string,
+): string | null {
+  return configured === false ? null : configured ?? defaultMessage;
+}
+
 function createAuthMutation(options: CreateAuthMutationOptions) {
+  const mutationInstanceId = nextAuthMutationInstanceId++;
   const adminContext = captureAdminContext();
   const i18n = useTranslation();
   let isLoading = $state(false);
@@ -57,18 +72,31 @@ function createAuthMutation(options: CreateAuthMutationOptions) {
     try {
       const result = await fn.call(provider, params);
       if (!isActiveMutation(epoch, provider, tenantIdentity)) return result;
+      const eventKey = `auth:${mutationInstanceId}:${String(options.method)}:${epoch}`;
       if (result.success) {
-        if (options.successMessage) sendNotification({ type: 'success', message: options.successMessage });
+        if (options.successMessage) {
+          sendNotification({
+            type: 'success',
+            message: options.successMessage,
+            key: `${eventKey}:success`,
+          });
+        }
         if (options.onSuccess) await options.onSuccess(result, adminContext);
       } else {
         const msg = result.error?.message ?? (typeof options.errorMessage === 'string' ? options.errorMessage : i18n.t('common.operationFailed'));
-        if (options.errorMessage !== false) sendNotification({ type: 'error', message: msg });
+        if (options.errorMessage !== false) {
+          sendNotification({ type: 'error', message: msg, key: `${eventKey}:error` });
+        }
       }
       return result;
     } catch (err) {
       const msg = err instanceof Error ? err.message : (typeof options.errorMessage === 'string' ? options.errorMessage : i18n.t('common.operationFailed'));
       if (isActiveMutation(epoch, provider, tenantIdentity) && options.errorMessage !== false) {
-        sendNotification({ type: 'error', message: msg });
+        sendNotification({
+          type: 'error',
+          message: msg,
+          key: `auth:${mutationInstanceId}:${String(options.method)}:${epoch}:error`,
+        });
       }
       return { success: false, error: { message: msg } };
     } finally {
@@ -100,11 +128,11 @@ function createAuthMutation(options: CreateAuthMutationOptions) {
 
 // ─── useLogin ─────────────────────────────────────────────────
 
-export function useLogin(opts?: { errorMessage?: string | false }) {
+export function useLogin(opts?: AuthNotificationOptions & { errorMessage?: string | false }) {
   return createAuthMutation({
     method: 'login',
-    successMessage: t('common.operationSuccess'),
-    errorMessage: opts?.errorMessage ?? t('common.loginFailed'),
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('common.operationSuccess')),
+    errorMessage: opts?.errorNotification ?? opts?.errorMessage ?? t('common.loginFailed'),
     onSuccess: async (result, adminContext) => { await adminContext.navigate(result.redirectTo ?? '/'); }
   });
 }
@@ -131,10 +159,11 @@ export function useLogout() {
 
 // ─── useRegister ──────────────────────────────────────────────
 
-export function useRegister() {
+export function useRegister(opts?: AuthNotificationOptions) {
   return createAuthMutation({
     method: 'register',
-    successMessage: t('auth.registerSuccess'),
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('auth.registerSuccess')),
+    errorMessage: opts?.errorNotification,
     onSuccess: async (result, adminContext) => {
       if (result.redirectTo) await adminContext.navigate(result.redirectTo);
     }
@@ -143,19 +172,21 @@ export function useRegister() {
 
 // ─── useForgotPassword ───────────────────────────────────────
 
-export function useForgotPassword() {
+export function useForgotPassword(opts?: AuthNotificationOptions) {
   return createAuthMutation({
     method: 'forgotPassword',
-    successMessage: t('auth.resetLinkSent')
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('auth.resetLinkSent')),
+    errorMessage: opts?.errorNotification,
   });
 }
 
 // ─── useUpdatePassword ───────────────────────────────────────
 
-export function useUpdatePassword() {
+export function useUpdatePassword(opts?: AuthNotificationOptions) {
   return createAuthMutation({
     method: 'updatePassword',
-    successMessage: t('common.operationSuccess'),
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('common.operationSuccess')),
+    errorMessage: opts?.errorNotification,
     onSuccess: async (result, adminContext) => {
       if (result.redirectTo) await adminContext.navigate(result.redirectTo);
     }
@@ -164,20 +195,22 @@ export function useUpdatePassword() {
 
 // ─── useUpdateIdentity / useUpdateProfile ────────────────────
 
-export function useUpdateIdentity() {
+export function useUpdateIdentity(opts?: AuthNotificationOptions) {
   return createAuthMutation({
     method: 'updateIdentity',
-    successMessage: t('common.operationSuccess'),
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('common.operationSuccess')),
+    errorMessage: opts?.errorNotification,
     onSuccess: async (result, adminContext) => {
       if (result.redirectTo) await adminContext.navigate(result.redirectTo);
     }
   });
 }
 
-export function useUpdateProfile() {
+export function useUpdateProfile(opts?: AuthNotificationOptions) {
   return createAuthMutation({
     method: 'updateProfile',
-    successMessage: t('common.operationSuccess'),
+    successMessage: resolveSuccessMessage(opts?.successNotification, t('common.operationSuccess')),
+    errorMessage: opts?.errorNotification,
     onSuccess: async (result, adminContext) => {
       if (result.redirectTo) await adminContext.navigate(result.redirectTo);
     }

package/src/context.svelte.ts

@@ -8,6 +8,7 @@ import type { LiveProvider } from './live.svelte';
 import type { AccessControlProvider } from './permissions.svelte';
 import type { AuditLogProvider } from './audit';
 import type { AgentProvider, ChatProvider } from './chatProvider.svelte';
+import type { EnterpriseRequestContext } from './enterprise';
 import {
   createTenantCacheKey,
   resolveTenantProviderMeta,
@@ -77,6 +78,10 @@ export interface AdminContextValue {
   readonly notificationProvider: ProviderBundle['notificationProvider'];
   readonly chatProvider: ChatProvider | null;
   readonly agentProvider: AgentProvider | null;
+  readonly organizationProvider: ProviderBundle['organizationProvider'];
+  readonly identityGovernanceProvider: ProviderBundle['identityGovernanceProvider'];
+  readonly sessionProvider: ProviderBundle['sessionProvider'];
+  readonly credentialProvider: ProviderBundle['credentialProvider'];
   readonly tenant: TenantContext | undefined;
   readonly tenantAdapter: TenantAdapter | undefined;
 }
@@ -102,9 +107,14 @@ export interface AdminContextAccessor {
   readonly notificationProvider: ProviderBundle['notificationProvider'];
   readonly chatProvider: ChatProvider | null;
   readonly agentProvider: AgentProvider | null;
+  readonly organizationProvider: ProviderBundle['organizationProvider'];
+  readonly identityGovernanceProvider: ProviderBundle['identityGovernanceProvider'];
+  readonly sessionProvider: ProviderBundle['sessionProvider'];
+  readonly credentialProvider: ProviderBundle['credentialProvider'];
   readonly tenant: TenantContext | undefined;
   readonly tenantAdapter: TenantAdapter | undefined;
   readonly tenantCacheKey: TenantCacheKey | undefined;
+  readonly enterpriseRequestContext: EnterpriseRequestContext;
   getDataProvider(name?: string): DataProvider;
   getDataProviderNames(): string[];
   resolveDataProviderName(resourceName: string, overrideName?: string): string;
@@ -166,6 +176,18 @@ function resolveProviderBundle(source: AdminContextSource): ProviderBundle {
     taskProvider: source.taskProvider ?? bundled?.taskProvider,
     routerProvider: source.routerProvider ?? bundled?.routerProvider,
     tenantAdapter: source.tenantAdapter ?? bundled?.tenantAdapter,
+    organizationProvider: source.organizationProvider !== undefined
+      ? source.organizationProvider
+      : bundled?.organizationProvider,
+    identityGovernanceProvider: source.identityGovernanceProvider !== undefined
+      ? source.identityGovernanceProvider
+      : bundled?.identityGovernanceProvider,
+    sessionProvider: source.sessionProvider !== undefined
+      ? source.sessionProvider
+      : bundled?.sessionProvider,
+    credentialProvider: source.credentialProvider !== undefined
+      ? source.credentialProvider
+      : bundled?.credentialProvider,
   };
 }
 
@@ -184,6 +206,10 @@ export function createAdminContext(source: AdminContextSource): AdminContextValu
     get notificationProvider() { return resolveProviderBundle(source).notificationProvider ?? null; },
     get chatProvider() { return resolveProviderBundle(source).chatProvider ?? null; },
     get agentProvider() { return resolveProviderBundle(source).agentProvider ?? null; },
+    get organizationProvider() { return resolveProviderBundle(source).organizationProvider ?? null; },
+    get identityGovernanceProvider() { return resolveProviderBundle(source).identityGovernanceProvider ?? null; },
+    get sessionProvider() { return resolveProviderBundle(source).sessionProvider ?? null; },
+    get credentialProvider() { return resolveProviderBundle(source).credentialProvider ?? null; },
     get tenant() { return source.tenant ?? inheritedTenant; },
     get tenantAdapter() { return resolveProviderBundle(source).tenantAdapter; },
   };
@@ -254,11 +280,24 @@ export function captureAdminContext(): AdminContextAccessor {
     },
     get chatProvider() { return scopedContext ? scopedContext.chatProvider : getLegacyChatProvider(); },
     get agentProvider() { return scopedContext ? scopedContext.agentProvider : getLegacyAgentProvider(); },
+    get organizationProvider() { return scopedContext?.organizationProvider ?? null; },
+    get identityGovernanceProvider() { return scopedContext?.identityGovernanceProvider ?? null; },
+    get sessionProvider() { return scopedContext?.sessionProvider ?? null; },
+    get credentialProvider() { return scopedContext?.credentialProvider ?? null; },
     get tenant() { return scopedContext?.tenant; },
     get tenantAdapter() { return scopedContext?.tenantAdapter; },
     get tenantCacheKey() {
       return accessor.tenant ? createTenantCacheKey(accessor.tenant, accessor.tenantAdapter) : undefined;
     },
+    get enterpriseRequestContext() {
+      const tenant = accessor.tenant;
+      return {
+        tenantId: tenant?.tenantId,
+        requestId: typeof tenant?.meta?.requestId === 'string' ? tenant.meta.requestId : undefined,
+        traceId: typeof tenant?.meta?.traceId === 'string' ? tenant.meta.traceId : undefined,
+        meta: tenant?.meta,
+      };
+    },
     getDataProvider(name) {
       const activeProviders = accessor.providers;
       if (!activeProviders) throw new Error('DataProvider not found. Did you call setDataProvider in App.svelte?');

package/src/enterprise.ts

@@ -0,0 +1,146 @@
+/** 企业级管理能力的正式 Provider 契约。 */
+
+export interface EnterpriseActionError {
+  message: string;
+  code?: string;
+}
+
+export interface EnterpriseActionResult {
+  success: boolean;
+  error?: EnterpriseActionError;
+}
+
+/** 每次企业能力调用都必须显式携带当前请求树的租户与追踪上下文。 */
+export interface EnterpriseRequestContext {
+  tenantId?: string | number;
+  requestId?: string;
+  traceId?: string;
+  meta?: Readonly<Record<string, unknown>>;
+}
+
+export interface Organization {
+  id: string;
+  name: string;
+  slug?: string;
+  domain?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface OrganizationProvider {
+  getCurrentOrganization: (context: EnterpriseRequestContext) => Promise<Organization | null>;
+  updateCurrentOrganization?: (
+    input: Partial<Omit<Organization, 'id'>>,
+    context: EnterpriseRequestContext,
+  ) => Promise<Organization>;
+}
+
+export interface EnterpriseSecurityPolicy {
+  sessionTimeoutMinutes: number;
+  auditRetentionDays: number;
+  auditLoggingEnabled: boolean;
+  requireSso: boolean;
+}
+
+export type IdentityProviderProtocol = 'oidc' | 'saml' | (string & {});
+export type IdentityProviderStatus = 'connected' | 'disabled' | 'error' | (string & {});
+
+export interface IdentityProviderSummary {
+  id: string;
+  name: string;
+  protocol: IdentityProviderProtocol;
+  status: IdentityProviderStatus;
+  metadataUrl?: string;
+  domain?: string;
+}
+
+export interface EnterpriseSecurityEvent {
+  id: string;
+  event: string;
+  actor?: string;
+  location?: string;
+  createdAt: string | Date;
+  severity?: 'info' | 'warning' | 'critical';
+  tenantId?: string | number;
+  requestId?: string;
+  traceId?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface IdentityGovernanceProvider {
+  getSecurityPolicy: (context: EnterpriseRequestContext) => Promise<EnterpriseSecurityPolicy>;
+  updateSecurityPolicy: (
+    policy: EnterpriseSecurityPolicy,
+    context: EnterpriseRequestContext,
+  ) => Promise<EnterpriseSecurityPolicy>;
+  listIdentityProviders: (context: EnterpriseRequestContext) => Promise<IdentityProviderSummary[]>;
+  testIdentityProvider: (params: {
+    id?: string;
+    protocol?: IdentityProviderProtocol;
+    metadataUrl?: string;
+  }, context: EnterpriseRequestContext) => Promise<EnterpriseActionResult>;
+  listSecurityEvents?: (params: {
+    page?: number;
+    pageSize?: number;
+  } | undefined, context: EnterpriseRequestContext) => Promise<{ data: EnterpriseSecurityEvent[]; total: number }>;
+}
+
+export interface SessionInfo {
+  id: string;
+  os?: string;
+  browser?: string;
+  ipAddress?: string;
+  lastActiveAt?: string | Date;
+  current: boolean;
+}
+
+export interface MfaState {
+  enabled: boolean;
+  methods?: string[];
+}
+
+export interface SessionProvider {
+  listSessions: (context: EnterpriseRequestContext) => Promise<SessionInfo[]>;
+  revokeSession: (sessionId: string, context: EnterpriseRequestContext) => Promise<EnterpriseActionResult>;
+  revokeOtherSessions: (context: EnterpriseRequestContext) => Promise<EnterpriseActionResult>;
+  getMfaState?: (context: EnterpriseRequestContext) => Promise<MfaState>;
+  setMfaEnabled?: (enabled: boolean, context: EnterpriseRequestContext) => Promise<MfaState>;
+}
+
+export interface ApiCredentialSummary {
+  id: string;
+  name: string;
+  prefix: string;
+  createdAt: string | Date;
+  lastUsedAt?: string | Date;
+  permissions: string[];
+}
+
+export interface CreatedApiCredential {
+  credential: ApiCredentialSummary;
+  /** 只在创建时返回一次；列表接口不得返回此字段。 */
+  secret: string;
+}
+
+export interface WebhookSummary {
+  id: string;
+  name: string;
+  url: string;
+  eventType: string;
+  enabled?: boolean;
+}
+
+export interface CredentialProvider {
+  listApiCredentials: (context: EnterpriseRequestContext) => Promise<ApiCredentialSummary[]>;
+  createApiCredential: (params: {
+    name: string;
+    permissions: string[];
+  }, context: EnterpriseRequestContext) => Promise<CreatedApiCredential>;
+  revokeApiCredential: (credentialId: string, context: EnterpriseRequestContext) => Promise<EnterpriseActionResult>;
+  listWebhooks: (context: EnterpriseRequestContext) => Promise<WebhookSummary[]>;
+  createWebhook: (params: {
+    name: string;
+    url: string;
+    eventType: string;
+  }, context: EnterpriseRequestContext) => Promise<WebhookSummary>;
+  deleteWebhook: (webhookId: string, context: EnterpriseRequestContext) => Promise<EnterpriseActionResult>;
+}

package/src/hook-utils.svelte.ts

@@ -128,7 +128,12 @@ export function createLiveSubscription(paramsFn: () => LiveSubscriptionParams):
 export type NotificationConfig =
   | string
   | false
-  | ((data?: unknown, values?: unknown, resource?: string) => { message: string; description?: string; type?: 'success' | 'error' })
+  | ((data?: unknown, values?: unknown, resource?: string) => {
+      message: string;
+      description?: string;
+      type?: 'success' | 'error';
+      key?: string;
+    })
   | undefined;
 
 export interface SuccessNotificationRequest {
@@ -154,7 +159,12 @@ export function fireSuccessNotification(request: SuccessNotificationRequest): vo
   if (!config && !defaultMessage) return;
   if (typeof config === 'function') {
     const result = config(data, values, resource);
-    notifyWithProvider({ type: 'success', message: result.message, description: result.description }, provider);
+    notifyWithProvider({
+      type: 'success',
+      message: result.message,
+      description: result.description,
+      key: result.key,
+    }, provider);
     return;
   }
   notifyWithProvider({ type: 'success', message: config || defaultMessage }, provider);
@@ -166,7 +176,12 @@ export function fireErrorNotification(request: ErrorNotificationRequest): void {
   if (!config && !defaultMessage) return;
   if (typeof config === 'function') {
     const result = config(error, undefined, resource);
-    notifyWithProvider({ type: 'error', message: result.message, description: result.description }, provider);
+    notifyWithProvider({
+      type: 'error',
+      message: result.message,
+      description: result.description,
+      key: result.key,
+    }, provider);
     return;
   }
   const errMsg = error instanceof Error ? error.message : String(error ?? '');

package/src/i18n.svelte.ts

@@ -90,6 +90,7 @@ const baseLocales: Record<string, Record<string, string>> = {
     'common.toggleSidebar': '切换侧边栏',
     'common.configRequired': '需要配置',
     'common.removeImage': '移除图片',
+    'common.skipToMainContent': '跳到主要内容',
     // Field
     'field.enterValue': '输入{label}',
     'field.selectPlaceholder': '请选择',
@@ -125,6 +126,8 @@ const baseLocales: Record<string, Record<string, string>> = {
     'auth.forgotPasswordDescription': '输入您的邮箱地址，我们将发送重置密码的链接。',
     'auth.resetPasswordDescription': '设置一个新的登录密码。',
     'auth.resetLinkSent': '重置链接已发送，请查看您的邮箱。',
+    'auth.resetLinkSentTitle': '重置链接已发送',
+    'auth.resetLinkSentDescription': '如果该账号存在，请按照邮件中的步骤重置密码。',
     'auth.passwordMismatch': '两次输入的密码不一致',
     'auth.emailRequired': '请输入邮箱',
     'auth.passwordRequired': '请输入密码',
@@ -719,6 +722,7 @@ const baseLocales: Record<string, Record<string, string>> = {
     'common.toggleSidebar': 'Toggle sidebar',
     'common.configRequired': 'Configuration Required',
     'common.removeImage': 'Remove image',
+    'common.skipToMainContent': 'Skip to main content',
     // Field
     'field.enterValue': 'Enter {label}',
     'field.selectPlaceholder': 'Select...',
@@ -754,6 +758,8 @@ const baseLocales: Record<string, Record<string, string>> = {
     'auth.forgotPasswordDescription': 'Enter your email address and we will send you a reset link.',
     'auth.resetPasswordDescription': 'Set a new sign-in password.',
     'auth.resetLinkSent': 'Reset link sent! Check your email.',
+    'auth.resetLinkSentTitle': 'Reset link sent',
+    'auth.resetLinkSentDescription': 'If the account exists, follow the instructions in the email to reset the password.',
     'auth.passwordMismatch': 'Passwords do not match',
     'auth.emailRequired': 'Email is required',
     'auth.passwordRequired': 'Password is required',

package/src/index.ts

@@ -84,8 +84,28 @@ export {
 export type { NotificationParams } from './notification.svelte';
 export { t, setLocale, getLocale, getAvailableLocales, addTranslations, useTranslation, setI18nProvider, getI18nProvider, createI18nScope, provideI18nScope, getI18nScope, resetI18n } from './i18n.svelte';
 export type { I18nProvider, I18nScope, I18nScopeOptions } from './i18n.svelte';
-export { audit, auditWithProvider, setAuditHandler, setAuditLogProvider, getAuditLogProvider } from './audit';
+export { audit, auditWithProvider, writeAuditEntry, setAuditHandler, setAuditLogProvider, getAuditLogProvider } from './audit';
 export type { AuditLogProvider } from './audit';
+export type {
+  ApiCredentialSummary,
+  CreatedApiCredential,
+  CredentialProvider,
+  EnterpriseActionError,
+  EnterpriseActionResult,
+  EnterpriseRequestContext,
+  EnterpriseSecurityEvent,
+  EnterpriseSecurityPolicy,
+  IdentityGovernanceProvider,
+  IdentityProviderProtocol,
+  IdentityProviderStatus,
+  IdentityProviderSummary,
+  MfaState,
+  Organization,
+  OrganizationProvider,
+  SessionInfo,
+  SessionProvider,
+  WebhookSummary,
+} from './enterprise';
 export { setChatProvider, getChatProvider, setChatContext, getChatContext, setAgentProvider, getAgentProvider, registerApproval, resolveApproval, hasPendingApprovals, resetChatProvider } from './chatProvider.svelte';
 export type { ChatProvider, ChatMessage, ChatContext, ChatAction, AgentProvider, AgentEvent, AgentOptions, AdminTool, AdminToolParameter, ToolResult } from './chatProvider.svelte';
 export { getTheme, setTheme, toggleTheme, getResolvedTheme, getColorTheme, setColorTheme, getColorThemes, configureTheme, getThemeConfig, clearCssOverrides, builtinPresets, registerColorPreset, getColorPresets, registerThemeOwner, updateThemeOwner, unregisterThemeOwner, resetTheme } from './theme.svelte';
@@ -136,6 +156,7 @@ export {
   useOnError, usePermissions,
   getLogoutVersion, resetLogoutVersion,
 } from './auth-hooks.svelte';
+export type { AuthNotificationOptions } from './auth-hooks.svelte';
 export {
   useSubmitTask,
   useTask,

package/src/provider-bundle.ts

@@ -6,6 +6,12 @@ import type { AuditLogProvider } from './audit';
 import type { AccessControlProvider } from './permissions.svelte';
 import type { LiveProvider } from './live.svelte';
 import type { RouterProvider } from './router-provider';
+import type {
+  CredentialProvider,
+  IdentityGovernanceProvider,
+  OrganizationProvider,
+  SessionProvider,
+} from './enterprise';
 import type {
   AuthProvider,
   BaseRecord,
@@ -52,6 +58,10 @@ export interface ProviderBundle {
   readonly taskProvider?: TaskProvider;
   readonly routerProvider?: RouterProvider;
   readonly tenantAdapter?: TenantAdapter;
+  readonly organizationProvider?: OrganizationProvider | null;
+  readonly identityGovernanceProvider?: IdentityGovernanceProvider | null;
+  readonly sessionProvider?: SessionProvider | null;
+  readonly credentialProvider?: CredentialProvider | null;
 }
 
 /** 保留传入对象的精确类型，同时执行 ProviderBundle 的编译期校验。 */