@ximatai/muyun-web-app 0.26.23 → 0.26.25

package/dist/types/web-contracts/index.d.ts

@@ -126,7 +126,7 @@ export interface WebBusinessNotification {
     content: string;
     dismissible: boolean;
     actions: WebBusinessNotificationAction[];
-    /** Persistent cards remain above ordinary overlays and outside the collapsible queue. */
+    /** Persistent floating cards remain actionable above ordinary overlays; all reminders share the current collection. */
     displayPolicy?: 'standard' | 'persistent';
     /** Optional absolute action deadline, in ISO-8601 format. */
     expiresAt?: string;
@@ -203,6 +203,20 @@ export interface CurrentUser {
     passwordChangeRequired?: boolean;
     timeZone?: string;
 }
+/** User-owned tool credential metadata; full secret is only returned on issuance. */
+export interface PersonalAccessTokenView {
+    id: string;
+    name: string;
+    displayPrefix: string;
+    createdAt: string;
+    expiresAt: string;
+    revokedAt?: string;
+    lastUsedAt?: string;
+}
+export interface IssuedPersonalAccessToken {
+    token: string;
+    accessToken: PersonalAccessTokenView;
+}
 export interface CurrentUserProfilePosition {
     id?: string;
     title?: string;
@@ -247,6 +261,71 @@ export interface TenantBranding {
 export interface TenantLoginContext {
     tenantId: string;
     branding?: TenantBranding;
+    /** External identity providers the tenant offers on its sign-in entry; empty when federation is off. */
+    externalLoginMethods?: ExternalLoginMethod[];
+}
+export interface ExternalLoginMethod {
+    providerId: string;
+    title: string;
+    providerType: string;
+}
+/**
+ * A started external sign-in or bind transaction. `state` and `browserProof` must stay in the initiating
+ * browser; only that browser can complete the transaction, and the proof is never put into a URL.
+ */
+export interface ExternalLoginStart {
+    transactionId: string;
+    state: string;
+    authorizationUrl: string;
+    browserProof: string;
+    expiresAt: string;
+    qrCode?: {
+        providerType: string;
+        scriptUrl: string;
+        authorizationUrl: string;
+        clientId: string;
+        redirectUri: string;
+        state: string;
+        scope: string;
+        messageOrigin: string;
+    } | null;
+}
+export type ExternalLoginStatus = 'succeeded' | 'denied' | 'expired' | 'confirmationRequired' | 'reviewPending' | 'reviewRejected';
+export type ExternalLoginFailure = 'admissionRejected' | 'identityNotBound' | 'identityConflict' | 'alreadyBound' | 'enterpriseMismatch' | 'policyDisabled' | 'accountUnavailable' | 'sessionEnded' | 'providerRejected' | 'providerUnavailable' | 'internalError';
+export type ExternalLoginPurpose = 'login' | 'bind';
+export interface ExternalIdentityView {
+    id: string;
+    providerId: string;
+    providerTitle: string;
+    externalUserId: string;
+    displayName?: string;
+    boundAt: string;
+    lastAuthenticatedAt?: string;
+}
+/** What the initiating browser submits after the provider returned it to the workbench. */
+export interface ExternalLoginCompleteRequest {
+    state: string;
+    browserProof: string;
+    /** Every provider parameter on the return address, verified on the server. */
+    parameters: Record<string, string>;
+}
+export interface ExternalProvisioningProfile {
+    displayName: string;
+    tenantId: string;
+    departmentIds: string[];
+    placements?: string[];
+}
+export interface ExternalLoginCompletion {
+    status: ExternalLoginStatus;
+    purpose: ExternalLoginPurpose;
+    failure?: ExternalLoginFailure;
+    login?: LoginResult;
+    binding?: ExternalIdentityView;
+    confirmation?: ExternalProvisioningProfile;
+}
+export interface OwnExternalIdentities {
+    bindings: ExternalIdentityView[];
+    bindableProviders: ExternalLoginMethod[];
 }
 export interface LoginRequest {
     tenantId?: string;
@@ -1119,6 +1198,8 @@ export interface ResolvedViewDescriptor {
     fields: ResolvedViewFieldDescriptor[];
     /** Dynamic-page provenance used to select the view configured by a menu entry. */
     sourceUiConfigId?: string;
+    /** Model literals in standard wire types; seed new records before context bindings and calculations. */
+    createDefaults?: Record<string, unknown>;
     formGroups?: FormGroupDescriptor[];
     formComputeRules?: ResolvedFormComputeRuleDescriptor[];
     formValidationRules?: ResolvedFormValidationRuleDescriptor[];
@@ -1411,6 +1492,8 @@ export interface UserSessionView {
     maxExpiresAt?: string;
     lastSeenAt?: string;
     passwordChangeRequired?: boolean;
+    /** How the session was authenticated, for example `password`. */
+    authenticationMethod?: string;
     loginIp?: string;
     loginUserAgent?: string;
     terminalType?: string;
@@ -1433,7 +1516,8 @@ export interface UserSessionStatusView {
     presentSessionCount?: number;
     idleSessionCount?: number;
 }
-export type UserPasswordStatus = 'normal' | 'initial' | 'resetRequired' | 'expired';
+/** `none` marks an account that has no local password and signs in through another method. */
+export type UserPasswordStatus = 'normal' | 'initial' | 'resetRequired' | 'expired' | 'none';
 export interface ResetPasswordResponse {
     count: number;
     temporaryPassword?: string;
@@ -1586,6 +1670,7 @@ export interface PlatformModule extends StandardEnabledTreeEntity {
 }
 /** A governed operation exposed by one platform module. */
 export interface PlatformModuleAction extends StandardEnabledSortableEntity {
+    schedulable?: boolean;
     bindingPending?: boolean;
     formSupported?: boolean;
     moduleAlias?: string;

package/dist/types/web-core/clients.d.ts

@@ -1,4 +1,4 @@
-import type { ChangeOwnPasswordRequest, CurrentUserProfile, CurrentUser, LoginRequest, LoginResult, UpdateCurrentUserProfileRequest, MenuMineResponse, PageBootstrap, TenantBranding, TenantLoginContext } from '../web-contracts/index';
+import type { ChangeOwnPasswordRequest, PersonalAccessTokenView, IssuedPersonalAccessToken, CurrentUserProfile, CurrentUser, ExternalLoginCompleteRequest, ExternalLoginCompletion, ExternalLoginStart, LoginRequest, LoginResult, UpdateCurrentUserProfileRequest, MenuMineResponse, OwnExternalIdentities, PageBootstrap, TenantBranding, TenantLoginContext } from '../web-contracts/index';
 import type { HttpClient } from './http';
 export interface SessionClient {
     current(): Promise<CurrentUser>;
@@ -18,6 +18,15 @@ export interface AuthClient {
     updateCurrentProfile(request: UpdateCurrentUserProfileRequest, token: string): Promise<CurrentUserProfile>;
     logout(token?: string): Promise<void>;
 }
+/** External identity sign-in and the current user's bindings; available only when federation is enabled. */
+export interface ExternalLoginClient {
+    startLogin(providerId: string, tenantId: string): Promise<ExternalLoginStart>;
+    startBind(providerId: string, token: string): Promise<ExternalLoginStart>;
+    complete(providerId: string, request: ExternalLoginCompleteRequest): Promise<ExternalLoginCompletion>;
+    confirm(providerId: string, request: Omit<ExternalLoginCompleteRequest, 'parameters'>): Promise<ExternalLoginCompletion>;
+    identities(token: string): Promise<OwnExternalIdentities>;
+    unbind(identityId: string, token: string): Promise<void>;
+}
 /** Resolves the public context used by a tenant-locked login entry. */
 export interface LoginContextClient {
     loginContext(tenantId: string): Promise<TenantLoginContext>;
@@ -33,4 +42,19 @@ export declare function createPageBootstrapClient(http: HttpClient): PageBootstr
  * contract instead of requiring application-level compatibility code.
  */
 export declare function normalizeMenuMineResponse(response: unknown): MenuMineResponse;
+/** Personal access token management uses an explicit interactive session, without a business tenant. */
+export interface PersonalAccessTokenClient {
+    capabilities(sessionToken: string): Promise<{
+        canCreate: boolean;
+    }>;
+    list(sessionToken: string): Promise<PersonalAccessTokenView[]>;
+    create(sessionToken: string, request: {
+        name: string;
+        validDays: number;
+    }): Promise<IssuedPersonalAccessToken>;
+    revoke(sessionToken: string, id: string): Promise<void>;
+    remove(sessionToken: string, id: string): Promise<void>;
+}
+export declare function createPersonalAccessTokenClient(http: HttpClient): PersonalAccessTokenClient;
+export declare function createExternalLoginClient(http: HttpClient): ExternalLoginClient;
 export declare function createAuthClient(http: HttpClient): AuthClient;

package/dist/{useWorkflowConfigurationContext-BkcNPU2H.js → useWorkflowConfigurationContext-BcK19EXl.js}

@@ -1,9 +1,9 @@
-import { E as e, y as t } from "./platform-workbench-CobObbuz.js";
-import { Kr as n, Nr as r, Ur as i, Ya as a, Yr as o, _n as s, zt as c } from "./platform-components-D0T03KGl.js";
+import { E as e, y as t } from "./platform-workbench-BBLDvT9V.js";
+import { $r as n, Vt as r, Xr as i, bn as a, ni as o, no as s, zr as c } from "./platform-components-D98pyZ77.js";
 import { computed as l, onMounted as u } from "vue";
 //#region src/views/useWorkflowConfigurationContext.ts
 function d(d) {
-	let f = a(), p = n({ moduleAlias: "platform.workflow.definition" }), m = r(p.http, d), h = {
+	let f = s(), p = n({ moduleAlias: "platform.workflow.definition" }), m = c(p.http, d), h = {
 		loadFunctions: async () => (await m.formulaFunctions()).map((e) => ({
 			name: e.name,
 			title: e.title,
@@ -30,14 +30,14 @@ function d(d) {
 			try {
 				await g.runtime.refreshTexts?.();
 			} catch (e) {
-				s(e, {
+				a(e, {
 					source: "workflow-design",
 					phase: "load"
 				});
 			}
 		}
 	});
-	let y = l(() => o(g.runtime)), b = l(() => [...c(y.value?.uiDescriptor)].map(([e, t]) => ({
+	let y = l(() => o(g.runtime)), b = l(() => [...r(y.value?.uiDescriptor)].map(([e, t]) => ({
 		name: e,
 		label: t.label ?? e,
 		valueType: t.valueType,
@@ -47,7 +47,7 @@ function d(d) {
 		try {
 			await g.runtime.ready;
 		} catch (e) {
-			s(e, {
+			a(e, {
 				source: "workflow-design",
 				phase: "load"
 			});