@ximatai/muyun-web-app 0.26.23 → 0.26.24

package/dist/types/web-contracts/index.d.ts

@@ -126,7 +126,7 @@ export interface WebBusinessNotification {
     content: string;
     dismissible: boolean;
     actions: WebBusinessNotificationAction[];
-    /** Persistent cards remain above ordinary overlays and outside the collapsible queue. */
+    /** Persistent floating cards remain actionable above ordinary overlays; all reminders share the current collection. */
     displayPolicy?: 'standard' | 'persistent';
     /** Optional absolute action deadline, in ISO-8601 format. */
     expiresAt?: string;
@@ -247,6 +247,71 @@ export interface TenantBranding {
 export interface TenantLoginContext {
     tenantId: string;
     branding?: TenantBranding;
+    /** External identity providers the tenant offers on its sign-in entry; empty when federation is off. */
+    externalLoginMethods?: ExternalLoginMethod[];
+}
+export interface ExternalLoginMethod {
+    providerId: string;
+    title: string;
+    providerType: string;
+}
+/**
+ * A started external sign-in or bind transaction. `state` and `browserProof` must stay in the initiating
+ * browser; only that browser can complete the transaction, and the proof is never put into a URL.
+ */
+export interface ExternalLoginStart {
+    transactionId: string;
+    state: string;
+    authorizationUrl: string;
+    browserProof: string;
+    expiresAt: string;
+    qrCode?: {
+        providerType: string;
+        scriptUrl: string;
+        authorizationUrl: string;
+        clientId: string;
+        redirectUri: string;
+        state: string;
+        scope: string;
+        messageOrigin: string;
+    } | null;
+}
+export type ExternalLoginStatus = 'succeeded' | 'denied' | 'expired' | 'confirmationRequired' | 'reviewPending' | 'reviewRejected';
+export type ExternalLoginFailure = 'admissionRejected' | 'identityNotBound' | 'identityConflict' | 'alreadyBound' | 'enterpriseMismatch' | 'policyDisabled' | 'accountUnavailable' | 'sessionEnded' | 'providerRejected' | 'providerUnavailable' | 'internalError';
+export type ExternalLoginPurpose = 'login' | 'bind';
+export interface ExternalIdentityView {
+    id: string;
+    providerId: string;
+    providerTitle: string;
+    externalUserId: string;
+    displayName?: string;
+    boundAt: string;
+    lastAuthenticatedAt?: string;
+}
+/** What the initiating browser submits after the provider returned it to the workbench. */
+export interface ExternalLoginCompleteRequest {
+    state: string;
+    browserProof: string;
+    /** Every provider parameter on the return address, verified on the server. */
+    parameters: Record<string, string>;
+}
+export interface ExternalProvisioningProfile {
+    displayName: string;
+    tenantId: string;
+    departmentIds: string[];
+    placements?: string[];
+}
+export interface ExternalLoginCompletion {
+    status: ExternalLoginStatus;
+    purpose: ExternalLoginPurpose;
+    failure?: ExternalLoginFailure;
+    login?: LoginResult;
+    binding?: ExternalIdentityView;
+    confirmation?: ExternalProvisioningProfile;
+}
+export interface OwnExternalIdentities {
+    bindings: ExternalIdentityView[];
+    bindableProviders: ExternalLoginMethod[];
 }
 export interface LoginRequest {
     tenantId?: string;
@@ -1411,6 +1476,8 @@ export interface UserSessionView {
     maxExpiresAt?: string;
     lastSeenAt?: string;
     passwordChangeRequired?: boolean;
+    /** How the session was authenticated, for example `password`. */
+    authenticationMethod?: string;
     loginIp?: string;
     loginUserAgent?: string;
     terminalType?: string;
@@ -1433,7 +1500,8 @@ export interface UserSessionStatusView {
     presentSessionCount?: number;
     idleSessionCount?: number;
 }
-export type UserPasswordStatus = 'normal' | 'initial' | 'resetRequired' | 'expired';
+/** `none` marks an account that has no local password and signs in through another method. */
+export type UserPasswordStatus = 'normal' | 'initial' | 'resetRequired' | 'expired' | 'none';
 export interface ResetPasswordResponse {
     count: number;
     temporaryPassword?: string;
@@ -1586,6 +1654,7 @@ export interface PlatformModule extends StandardEnabledTreeEntity {
 }
 /** A governed operation exposed by one platform module. */
 export interface PlatformModuleAction extends StandardEnabledSortableEntity {
+    schedulable?: boolean;
     bindingPending?: boolean;
     formSupported?: boolean;
     moduleAlias?: string;

package/dist/types/web-core/clients.d.ts

@@ -1,4 +1,4 @@
-import type { ChangeOwnPasswordRequest, CurrentUserProfile, CurrentUser, LoginRequest, LoginResult, UpdateCurrentUserProfileRequest, MenuMineResponse, PageBootstrap, TenantBranding, TenantLoginContext } from '../web-contracts/index';
+import type { ChangeOwnPasswordRequest, CurrentUserProfile, CurrentUser, ExternalLoginCompleteRequest, ExternalLoginCompletion, ExternalLoginStart, LoginRequest, LoginResult, UpdateCurrentUserProfileRequest, MenuMineResponse, OwnExternalIdentities, PageBootstrap, TenantBranding, TenantLoginContext } from '../web-contracts/index';
 import type { HttpClient } from './http';
 export interface SessionClient {
     current(): Promise<CurrentUser>;
@@ -18,6 +18,15 @@ export interface AuthClient {
     updateCurrentProfile(request: UpdateCurrentUserProfileRequest, token: string): Promise<CurrentUserProfile>;
     logout(token?: string): Promise<void>;
 }
+/** External identity sign-in and the current user's bindings; available only when federation is enabled. */
+export interface ExternalLoginClient {
+    startLogin(providerId: string, tenantId: string): Promise<ExternalLoginStart>;
+    startBind(providerId: string, token: string): Promise<ExternalLoginStart>;
+    complete(providerId: string, request: ExternalLoginCompleteRequest): Promise<ExternalLoginCompletion>;
+    confirm(providerId: string, request: Omit<ExternalLoginCompleteRequest, 'parameters'>): Promise<ExternalLoginCompletion>;
+    identities(token: string): Promise<OwnExternalIdentities>;
+    unbind(identityId: string, token: string): Promise<void>;
+}
 /** Resolves the public context used by a tenant-locked login entry. */
 export interface LoginContextClient {
     loginContext(tenantId: string): Promise<TenantLoginContext>;
@@ -33,4 +42,5 @@ export declare function createPageBootstrapClient(http: HttpClient): PageBootstr
  * contract instead of requiring application-level compatibility code.
  */
 export declare function normalizeMenuMineResponse(response: unknown): MenuMineResponse;
+export declare function createExternalLoginClient(http: HttpClient): ExternalLoginClient;
 export declare function createAuthClient(http: HttpClient): AuthClient;

package/dist/{useWorkflowConfigurationContext-BkcNPU2H.js → useWorkflowConfigurationContext-BLFXzHwn.js}

@@ -1,9 +1,9 @@
-import { E as e, y as t } from "./platform-workbench-CobObbuz.js";
-import { Kr as n, Nr as r, Ur as i, Ya as a, Yr as o, _n as s, zt as c } from "./platform-components-D0T03KGl.js";
+import { E as e, y as t } from "./platform-workbench-VhgKhPLI.js";
+import { Gr as n, Jr as r, Pr as i, Za as a, Zr as o, _n as s, zt as c } from "./platform-components-Xb5qgsXU.js";
 import { computed as l, onMounted as u } from "vue";
 //#region src/views/useWorkflowConfigurationContext.ts
 function d(d) {
-	let f = a(), p = n({ moduleAlias: "platform.workflow.definition" }), m = r(p.http, d), h = {
+	let f = a(), p = r({ moduleAlias: "platform.workflow.definition" }), m = i(p.http, d), h = {
 		loadFunctions: async () => (await m.formulaFunctions()).map((e) => ({
 			name: e.name,
 			title: e.title,
@@ -12,12 +12,12 @@ function d(d) {
 			signature: `${e.name}(${e.parameters.map((e) => e.name).join(", ")})`
 		})),
 		validate: (e) => m.validateCondition(e)
-	}, g = i({
+	}, g = n({
 		http: p.http,
 		language: f,
 		moduleAlias: d,
 		runtimeAccess: "VIEW"
-	}), _ = t(), v = l(() => _?.value?.tenantId ? i({
+	}), _ = t(), v = l(() => _?.value?.tenantId ? n({
 		http: p.http,
 		language: f,
 		moduleAlias: "iam.organization",