@zlooks.cn/password-auth-server 1.0.0

package/dist/services/application.service.d.ts

@@ -0,0 +1,8 @@
+import { Application } from '@hile/micro';
+declare const _default: import("@hile/core").ServiceRegisterProps<{
+    readonly application: Application;
+    readonly registry: import("@zlooks.cn/registry-config").RegistryBootstrap;
+    readonly advertiseHost: string | undefined;
+}>;
+export default _default;
+//# sourceMappingURL=application.service.d.ts.map

package/dist/services/application.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.service.d.ts","sourceRoot":"","sources":["../../src/services/application.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/services/application.service.js

@@ -0,0 +1,22 @@
+import { defineService } from '@hile/core';
+import { Application } from '@hile/micro';
+import { parseAdvertiseHost, parseRegistryBootstrap, } from '@zlooks.cn/registry-config';
+import { detect } from 'detect-port';
+import { PASSWORD_AUTH_SERVICE_NAMESPACE } from '../service-identity.js';
+export default defineService('zlooks.password-auth.application', async (shutdown) => {
+    const registry = parseRegistryBootstrap({
+        REGISTRY_HOST: process.env.REGISTRY_HOST,
+        REGISTRY_PORT: process.env.REGISTRY_PORT,
+    });
+    const advertiseHost = parseAdvertiseHost(process.env.HILE_ADVERTISE_HOST);
+    const application = new Application({
+        namespace: PASSWORD_AUTH_SERVICE_NAMESPACE,
+        registry,
+        ...(advertiseHost ? { advertiseHost } : {}),
+    });
+    await application.load(new URL('../messages', import.meta.url).pathname);
+    const microPort = await detect();
+    shutdown(await application.listen(microPort));
+    return { application, registry, advertiseHost };
+});
+//# sourceMappingURL=application.service.js.map

package/dist/services/application.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.service.js","sourceRoot":"","sources":["../../src/services/application.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAEzE,eAAe,aAAa,CAAC,kCAAkC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAClF,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACtC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QACxC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;KACzC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,SAAS,EAAE,+BAA+B;QAC1C,QAAQ;QACR,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAW,CAAC;AAC3D,CAAC,CAAC,CAAC"}

package/dist/services/config.service.d.ts

@@ -0,0 +1,63 @@
+declare const _default: import("@hile/core").ServiceRegisterProps<import("@zlooks.cn/registry-config").RegistryConfigSubscription<Readonly<{
+    infrastructure: {
+        postgres: {
+            host: string;
+            port: number;
+            username: string;
+            password: string;
+            database: string;
+            ssl: boolean;
+            poolSize: number;
+        };
+        redis: {
+            host: string;
+            port: number;
+            username?: string | undefined;
+            password?: string | undefined;
+            database: number;
+            keyPrefix: string;
+            tls: boolean;
+        };
+        email: {
+            smtp: {
+                host: string;
+                port: number;
+                secure: boolean;
+                username: string;
+                password: string;
+            };
+            from: {
+                name: string;
+                address: string;
+            };
+        };
+    };
+    discovery: {
+        instanceId: "password-auth";
+        generation: 2;
+        leaseMs: 10000;
+    };
+    rsc: {
+        generation: 2;
+        priority: 100;
+    };
+    password: {
+        minLength: 12;
+        maxLength: 128;
+        memoryCostKiB: 65536;
+        timeCost: 3;
+        parallelism: 1;
+        maxFailedAttempts: 5;
+        lockoutMs: 900000;
+    };
+    verification: {
+        hmacKey: string;
+        codeTtlMs: 600000;
+        resendIntervalMs: 60000;
+        maxSendsPerTransaction: 3;
+        maxSendsPerEmailPerHour: 5;
+        maxVerificationAttempts: 5;
+    };
+}>>>;
+export default _default;
+//# sourceMappingURL=config.service.d.ts.map

package/dist/services/config.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.service.d.ts","sourceRoot":"","sources":["../../src/services/config.service.ts"],"names":[],"mappings":""}

package/dist/services/config.service.js

@@ -0,0 +1,20 @@
+import { defineService, loadService } from '@hile/core';
+import { parseEmailConfig, parsePostgresConfig, parseRedisConfig } from '@zlooks.cn/infrastructure';
+import { registryConfigTopic, subscribeRegistryConfig } from '@zlooks.cn/registry-config';
+import { parsePasswordAuthConfig } from '../config/schema.js';
+import applicationService from './application.service.js';
+export default defineService('zlooks.password-auth.config', async (shutdown) => {
+    const { application } = await loadService(applicationService);
+    const subscriber = await subscribeRegistryConfig(application, {
+        sources: {
+            postgres: { topic: registryConfigTopic('postgres'), parse: parsePostgresConfig },
+            redis: { topic: registryConfigTopic('redis'), parse: parseRedisConfig },
+            email: { topic: registryConfigTopic('email'), parse: parseEmailConfig },
+            passwordAuth: { topic: registryConfigTopic('password-auth'), parse: (value) => value },
+        },
+        compose: parsePasswordAuthConfig,
+    });
+    shutdown(() => subscriber.close());
+    return subscriber;
+});
+//# sourceMappingURL=config.service.js.map

package/dist/services/config.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.service.js","sourceRoot":"","sources":["../../src/services/config.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAE1D,eAAe,aAAa,CAAC,6BAA6B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAC7E,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE;QAC5D,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE;YAChF,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACvE,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACvE,YAAY,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE;SAC9E;QACV,OAAO,EAAE,uBAAuB;KACjC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/services/database.service.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@hile/core").ServiceRegisterProps<import("typeorm").DataSource>;
+export default _default;
+//# sourceMappingURL=database.service.d.ts.map

package/dist/services/database.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.service.d.ts","sourceRoot":"","sources":["../../src/services/database.service.ts"],"names":[],"mappings":""}

package/dist/services/database.service.js

@@ -0,0 +1,23 @@
+import { defineService, loadService } from '@hile/core';
+import { createDataSource } from '@hile/typeorm';
+import { passwordAuthEntities } from '../persistence/entities.js';
+import configService from './config.service.js';
+export default defineService('zlooks.password-auth.database', async (shutdown) => {
+    const config = (await loadService(configService)).snapshot().infrastructure.postgres;
+    const dataSource = await createDataSource({
+        type: 'postgres',
+        host: config.host,
+        port: config.port,
+        username: config.username,
+        password: config.password,
+        database: config.database,
+        ssl: config.ssl,
+        synchronize: false,
+        migrationsRun: false,
+        poolSize: config.poolSize,
+        entities: [...passwordAuthEntities],
+    });
+    shutdown(() => dataSource.destroy());
+    return dataSource;
+});
+//# sourceMappingURL=database.service.js.map

package/dist/services/database.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.service.js","sourceRoot":"","sources":["../../src/services/database.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAEhD,eAAe,aAAa,CAAC,+BAA+B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;IACrF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;QACxC,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,KAAK;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACpC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/services/email.service.d.ts

@@ -0,0 +1,4 @@
+import type { VerificationEmailSender } from '../email/verification-email-sender.js';
+declare const _default: import("@hile/core").ServiceRegisterProps<VerificationEmailSender>;
+export default _default;
+//# sourceMappingURL=email.service.d.ts.map

package/dist/services/email.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.service.d.ts","sourceRoot":"","sources":["../../src/services/email.service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/services/email.service.js

@@ -0,0 +1,37 @@
+import { defineService, loadService } from '@hile/core';
+import { watchSerialLatest } from '@hile/reactivity';
+import { createRuntimeReloader } from '@hile/reloader';
+import { NodemailerVerificationEmailSender } from '../email/nodemailer-verification-email-sender.js';
+import configService from './config.service.js';
+import loggerService from './logger.service.js';
+export default defineService('zlooks.email', async (shutdown) => {
+    const [configs, logger] = await Promise.all([loadService(configService), loadService(loggerService)]);
+    const reloader = createRuntimeReloader({
+        debounceMs: 100,
+        create: async (config) => new NodemailerVerificationEmailSender(config),
+        dispose: async (sender) => sender.close(),
+        onError: (error, context) => logger.error({
+            err: error,
+            event: 'email.runtime-reload.failed',
+            stage: context.stage,
+        }, 'Email runtime reload failed'),
+    });
+    await reloader.update(configs.snapshot().infrastructure.email);
+    const stopConfigUpdates = watchSerialLatest(configs.current, async (config) => {
+        if (config)
+            await reloader.update(config.infrastructure.email);
+    });
+    shutdown(async () => {
+        stopConfigUpdates();
+        await reloader.stop();
+    });
+    return {
+        async send(input) {
+            const sender = reloader.current();
+            if (!sender)
+                throw new Error('Email delivery is unavailable');
+            await sender.send(input);
+        },
+    };
+});
+//# sourceMappingURL=email.service.js.map

package/dist/services/email.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.service.js","sourceRoot":"","sources":["../../src/services/email.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AAErG,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAEhD,eAAe,aAAa,CAA0B,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IACvF,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,qBAAqB,CAAiD;QACrF,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,iCAAiC,CAAC,MAAM,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QACzC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YACxC,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,6BAA6B;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,EAAE,6BAA6B,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5E,IAAI,MAAM;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,iBAAiB,EAAE,CAAC;QACpB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC9D,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/services/logger.service.d.ts

@@ -0,0 +1,4 @@
+import { type Logger } from '@hile/logger';
+declare const _default: import("@hile/core").ServiceRegisterProps<Logger>;
+export default _default;
+//# sourceMappingURL=logger.service.d.ts.map

package/dist/services/logger.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.service.d.ts","sourceRoot":"","sources":["../../src/services/logger.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/services/logger.service.js

@@ -0,0 +1,8 @@
+import { defineService } from '@hile/core';
+import { createLogger } from '@hile/logger';
+export default defineService('zlooks.password-auth.logger', async (shutdown) => {
+    const { logger, teardown } = createLogger({ level: 'info', pretty: false });
+    shutdown(teardown);
+    return logger;
+});
+//# sourceMappingURL=logger.service.js.map

package/dist/services/logger.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.service.js","sourceRoot":"","sources":["../../src/services/logger.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAe,MAAM,cAAc,CAAC;AAEzD,eAAe,aAAa,CAAC,6BAA6B,EAAE,KAAK,EAAE,QAAQ,EAAmB,EAAE;IAC9F,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/dist/services/password-auth.boot.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@hile/core").ServiceRegisterProps<import("../runtime/password-auth-runtime.js").PasswordAuthRuntime>;
+export default _default;
+//# sourceMappingURL=password-auth.boot.d.ts.map

package/dist/services/password-auth.boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-auth.boot.d.ts","sourceRoot":"","sources":["../../src/services/password-auth.boot.ts"],"names":[],"mappings":""}

package/dist/services/password-auth.boot.js

@@ -0,0 +1,4 @@
+import { defineService, loadService } from '@hile/core';
+import passwordRuntimeService from './password-runtime.service.js';
+export default defineService('zlooks.password-auth.boot', async () => loadService(passwordRuntimeService));
+//# sourceMappingURL=password-auth.boot.js.map

package/dist/services/password-auth.boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-auth.boot.js","sourceRoot":"","sources":["../../src/services/password-auth.boot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,sBAAsB,MAAM,+BAA+B,CAAC;AAEnE,eAAe,aAAa,CAC1B,2BAA2B,EAC3B,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAChD,CAAC"}

package/dist/services/password-runtime.service.d.ts

@@ -0,0 +1,4 @@
+import { PasswordAuthRuntime } from '../runtime/password-auth-runtime.js';
+declare const _default: import("@hile/core").ServiceRegisterProps<PasswordAuthRuntime>;
+export default _default;
+//# sourceMappingURL=password-runtime.service.d.ts.map

package/dist/services/password-runtime.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-runtime.service.d.ts","sourceRoot":"","sources":["../../src/services/password-runtime.service.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/services/password-runtime.service.js

@@ -0,0 +1,135 @@
+import { randomBytes } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { defineService, loadService } from '@hile/core';
+import { Application } from '@hile/micro';
+import { HILE_RSC_RUNTIME } from '@hile/rsc/protocol';
+import { RscArtifactServerFunctionRuntime, RscPluginService, createOfficialRscRenderer, } from '@hile/rsc/plugin';
+import { resolveVerifiedRscPluginArtifact } from '@hile/rsc/artifact';
+import { HileRscPluginRuntime, resolveHileRscPluginIdentity, } from '@hile/rsc-discovery-hile';
+import { detect } from 'detect-port';
+import { PasswordAuthenticator } from '../password/password-authenticator.js';
+import { RedisPasswordAttemptCoordinator } from '../password/attempt-coordinator.js';
+import { RedisVerificationCodeRateLimiter } from '../email/verification-code-rate-limiter.js';
+import { TypeOrmPasswordCredentialRepository } from '../password/typeorm-credential-repository.js';
+import { PasswordCredentialLifecyclePublisher, TypeOrmPasswordCredentialLifecycleOutboxStore, } from '../password/credential-lifecycle-outbox.js';
+import { AuthAnnouncementPublisher } from '../runtime/auth-announcement-publisher.js';
+import { PasswordAuthRuntime } from '../runtime/password-auth-runtime.js';
+import { RedisPasswordTransactionStateStore } from '../runtime/password-state-store.js';
+import applicationService from './application.service.js';
+import configService from './config.service.js';
+import databaseService from './database.service.js';
+import emailService from './email.service.js';
+import loggerService from './logger.service.js';
+import redisService from './redis.service.js';
+export default defineService('zlooks.password-auth.runtime', async (shutdown) => {
+    const [applicationRuntime, configSubscriber, database, redis, logger, email] = await Promise.all([
+        loadService(applicationService),
+        loadService(configService),
+        loadService(databaseService),
+        loadService(redisService),
+        loadService(loggerService),
+        loadService(emailService),
+    ]);
+    const { application } = applicationRuntime;
+    const config = configSubscriber.snapshot();
+    const runtimeInstanceId = `${config.discovery.instanceId.slice(0, 110)}-${randomBytes(8).toString('hex')}`;
+    const authenticator = await PasswordAuthenticator.create(new TypeOrmPasswordCredentialRepository(database), config.password, () => new Date(), new RedisPasswordAttemptCoordinator(redis, config.verification.hmacKey));
+    const authentication = new PasswordAuthRuntime(authenticator, new RedisPasswordTransactionStateStore(redis), () => new Date(), {
+        config: config.verification,
+        sender: email,
+        onDeliveryError: (error, context) => logger.error({
+            err: error,
+            event: 'password-auth.verification-email.delivery-failed',
+            authenticationTransactionId: context.transactionId,
+            authenticationIntent: context.intent,
+        }, 'Password verification email delivery failed'),
+        rateLimiter: new RedisVerificationCodeRateLimiter(redis, config.verification.maxSendsPerEmailPerHour, config.verification.hmacKey),
+    });
+    const credentialLifecyclePublisher = new PasswordCredentialLifecyclePublisher({
+        application,
+        redis,
+        store: new TypeOrmPasswordCredentialLifecycleOutboxStore(database),
+        onError: (error, event) => logger.error({
+            err: error,
+            event: 'password-auth.credential-lifecycle.publish-failed',
+            authenticationTransactionId: event?.transactionId,
+            lifecycleKind: event?.kind,
+        }, 'Password credential lifecycle publication failed'),
+    });
+    const artifactBuildRoot = fileURLToPath(new URL('../../.hile-rsc', import.meta.url));
+    const { artifactRoot, manifest } = await resolveVerifiedRscPluginArtifact(artifactBuildRoot, HILE_RSC_RUNTIME);
+    if (manifest.pluginId !== 'auth.password') {
+        throw new Error(`Unexpected password authentication RSC plugin: ${manifest.pluginId}`);
+    }
+    const announcement = new AuthAnnouncementPublisher({
+        application,
+        instanceId: runtimeInstanceId,
+        generation: config.discovery.generation,
+        leaseMs: config.discovery.leaseMs,
+        rscBuildId: manifest.buildId,
+        onError: (error) => logger.error({
+            err: error,
+            event: 'password-auth.announcement.refresh-failed',
+        }, 'Password auth announcement refresh failed'),
+    });
+    const baseRscIdentity = resolveHileRscPluginIdentity({
+        pluginId: manifest.pluginId,
+        buildId: manifest.buildId,
+        development: false,
+    });
+    const rscIdentity = {
+        namespace: baseRscIdentity.namespace,
+        instanceId: `${baseRscIdentity.instanceId}-${randomBytes(8).toString('hex')}`,
+    };
+    const rscApplication = new Application({
+        namespace: rscIdentity.namespace,
+        registry: applicationRuntime.registry,
+        ...(applicationRuntime.advertiseHost
+            ? { advertiseHost: applicationRuntime.advertiseHost }
+            : {}),
+    });
+    const rscService = new RscPluginService({
+        manifest,
+        renderer: createOfficialRscRenderer(artifactRoot),
+        serverFunctions: new RscArtifactServerFunctionRuntime(artifactRoot),
+    });
+    const rscMicroPort = await detect();
+    const rsc = new HileRscPluginRuntime({
+        application: rscApplication,
+        service: rscService,
+        port: rscMicroPort,
+        discovery: {
+            namespace: rscIdentity.namespace,
+            instanceId: rscIdentity.instanceId,
+            priority: config.rsc.priority,
+            generation: config.rsc.generation,
+            artifactRoot,
+            // Deployment trust boundary: every peer able to publish on the internal Hile Micro
+            // network is trusted, so discovery intentionally carries no signing credential.
+            authentication: { mode: 'trusted-internal' },
+        },
+    });
+    try {
+        await announcement.start();
+        await rsc.start();
+        credentialLifecyclePublisher.start();
+    }
+    catch (error) {
+        await Promise.allSettled([credentialLifecyclePublisher.close(), announcement.close(), rsc.close()]);
+        throw error;
+    }
+    shutdown(async () => {
+        const results = await Promise.allSettled([
+            credentialLifecyclePublisher.close(),
+            rsc.close(),
+            announcement.close(),
+        ]);
+        const errors = results
+            .filter((result) => result.status === 'rejected')
+            .map((result) => result.reason);
+        if (errors.length)
+            throw new AggregateError(errors, 'Password authentication cleanup failed');
+    });
+    return authentication;
+});
+//# sourceMappingURL=password-runtime.service.js.map

package/dist/services/password-runtime.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-runtime.service.js","sourceRoot":"","sources":["../../src/services/password-runtime.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AACnG,OAAO,EACL,oCAAoC,EACpC,6CAA6C,GAC9C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAC1D,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAE9C,eAAe,aAAa,CAAC,8BAA8B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAC9E,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/F,WAAW,CAAC,kBAAkB,CAAC;QAC/B,WAAW,CAAC,aAAa,CAAC;QAC1B,WAAW,CAAC,eAAe,CAAC;QAC5B,WAAW,CAAC,YAAY,CAAC;QACzB,WAAW,CAAC,aAAa,CAAC;QAC1B,WAAW,CAAC,YAAY,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;IAC3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3G,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,MAAM,CACtD,IAAI,mCAAmC,CAAC,QAAQ,CAAC,EACjD,MAAM,CAAC,QAAQ,EACf,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAChB,IAAI,+BAA+B,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CACxE,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAC5C,aAAa,EACb,IAAI,kCAAkC,CAAC,KAAK,CAAC,EAC7C,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAChB;QACE,MAAM,EAAE,MAAM,CAAC,YAAY;QAC3B,MAAM,EAAE,KAAK;QACb,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YAChD,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,kDAAkD;YACzD,2BAA2B,EAAE,OAAO,CAAC,aAAa;YAClD,oBAAoB,EAAE,OAAO,CAAC,MAAM;SACrC,EAAE,6CAA6C,CAAC;QACjD,WAAW,EAAE,IAAI,gCAAgC,CAC/C,KAAK,EACL,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAC3C,MAAM,CAAC,YAAY,CAAC,OAAO,CAC5B;KACF,CACF,CAAC;IACF,MAAM,4BAA4B,GAAG,IAAI,oCAAoC,CAAC;QAC5E,WAAW;QACX,KAAK;QACL,KAAK,EAAE,IAAI,6CAA6C,CAAC,QAAQ,CAAC;QAClE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,mDAAmD;YAC1D,2BAA2B,EAAE,KAAK,EAAE,aAAa;YACjD,aAAa,EAAE,KAAK,EAAE,IAAI;SAC3B,EAAE,kDAAkD,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrF,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,MAAM,gCAAgC,CACvE,iBAAiB,EACjB,gBAAgB,CACjB,CAAC;IACF,IAAI,QAAQ,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC;QACjD,WAAW;QACX,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU;QACvC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO;QACjC,UAAU,EAAE,QAAQ,CAAC,OAAO;QAC5B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/B,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,2CAA2C;SACnD,EAAE,2CAA2C,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,4BAA4B,CAAC;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG;QAClB,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,UAAU,EAAE,GAAG,eAAe,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;KAC9E,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,WAAW,CAAC;QACrC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;QACrC,GAAG,CAAC,kBAAkB,CAAC,aAAa;YAClC,CAAC,CAAC,EAAE,aAAa,EAAE,kBAAkB,CAAC,aAAa,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC;QACtC,QAAQ;QACR,QAAQ,EAAE,yBAAyB,CAAC,YAAY,CAAC;QACjD,eAAe,EAAE,IAAI,gCAAgC,CAAC,YAAY,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,MAAM,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,oBAAoB,CAAC;QACnC,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE;YACT,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ;YAC7B,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;YACjC,YAAY;YACZ,mFAAmF;YACnF,gFAAgF;YAChF,cAAc,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;SAC7C;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,4BAA4B,CAAC,KAAK,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpG,MAAM,KAAK,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvC,4BAA4B,CAAC,KAAK,EAAE;YACpC,GAAG,CAAC,KAAK,EAAE;YACX,YAAY,CAAC,KAAK,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,OAAO;aACnB,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;aACjF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAiB,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC,CAAC"}

package/dist/services/redis.service.d.ts

@@ -0,0 +1,4 @@
+import type { Redis } from 'ioredis';
+declare const _default: import("@hile/core").ServiceRegisterProps<Redis>;
+export default _default;
+//# sourceMappingURL=redis.service.d.ts.map

package/dist/services/redis.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.service.d.ts","sourceRoot":"","sources":["../../src/services/redis.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC"}

package/dist/services/redis.service.js

@@ -0,0 +1,18 @@
+import { defineService, loadService } from '@hile/core';
+import { createRedis } from '@hile/ioredis';
+import configService from './config.service.js';
+export default defineService('zlooks.password-auth.redis', async (shutdown) => {
+    const config = (await loadService(configService)).snapshot().infrastructure.redis;
+    const redis = await createRedis({
+        host: config.host,
+        port: config.port,
+        db: config.database,
+        keyPrefix: config.keyPrefix,
+        ...(config.username ? { username: config.username } : {}),
+        ...(config.password ? { password: config.password } : {}),
+        ...(config.tls ? { tls: {} } : {}),
+    });
+    shutdown(() => redis.quit());
+    return redis;
+});
+//# sourceMappingURL=redis.service.js.map

package/dist/services/redis.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.service.js","sourceRoot":"","sources":["../../src/services/redis.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAEhD,eAAe,aAAa,CAAQ,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IACnF,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,EAAE,EAAE,MAAM,CAAC,QAAQ;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,91 @@
+{
+  "name": "@zlooks.cn/password-auth-server",
+  "version": "1.0.0",
+  "private": false,
+  "type": "module",
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "bin": {
+    "zlooks-password-auth-server": "dist/command/index.js"
+  },
+  "files": [
+    "dist",
+    ".hile-rsc"
+  ],
+  "zlooks": {
+    "kind": "service",
+    "description": "密码认证扩展服务",
+    "dependsOn": [],
+    "nodeConditions": [
+      "react-server"
+    ],
+    "commands": {
+      "db": [
+        "sync",
+        "migrate"
+      ]
+    }
+  },
+  "scripts": {
+    "build:rsc": "pnpm run clean:rsc && hile-rsc build",
+    "verify:rsc": "hile-rsc verify",
+    "build:runtime": "pnpm run clean:runtime && tsc -p tsconfig.runtime.json && fix-esm-import-path --preserve-import-type ./dist",
+    "build": "pnpm run build:rsc && pnpm run build:runtime",
+    "clean:runtime": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "clean:rsc": "node -e \"require('node:fs').rmSync('.hile-rsc', { recursive: true, force: true })\"",
+    "dev": "NODE_OPTIONS=--conditions=react-server hile start --dev --env-file ~/.zlooks.cn/.env",
+    "start": "NODE_OPTIONS=--conditions=react-server hile start --env-file ~/.zlooks.cn/.env",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.runtime.json --noEmit && tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@hile/context": "4.0.2",
+    "@hile/core": "4.0.1",
+    "@hile/ioredis": "4.0.1",
+    "@hile/logger": "4.0.1",
+    "@hile/message-loader": "4.0.3",
+    "@hile/micro": "4.0.3",
+    "@hile/reactivity": "3.0.1",
+    "@hile/redis-lock": "4.0.1",
+    "@hile/redis-rate-limit": "4.0.2",
+    "@hile/reloader": "3.0.3",
+    "@hile/rsc": "1.0.17",
+    "@hile/rsc-discovery-hile": "1.0.14",
+    "@hile/schedule": "4.0.2",
+    "@hile/typeorm": "4.0.1",
+    "@node-rs/argon2": "2.1.0",
+    "@zlooks.cn/auth-extension-contract": "1.0.0",
+    "@zlooks.cn/database-command": "1.0.0",
+    "@zlooks.cn/global-config-shared": "1.0.0",
+    "@zlooks.cn/infrastructure": "1.0.0",
+    "@zlooks.cn/registry-config": "1.0.0",
+    "@zlooks.cn/service-command": "1.0.0",
+    "@zlooks.cn/ui": "1.0.0",
+    "@zlooks.cn/user-shared": "1.0.0",
+    "@zlooks.cn/utils": "1.0.0",
+    "antd": "6.6.1",
+    "detect-port": "2.1.0",
+    "ioredis": "5.11.1",
+    "nodemailer": "9.0.5",
+    "pg": "8.23.0",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
+    "react-server-dom-webpack": "19.2.8",
+    "typeorm": "1.1.0",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@hile/cli": "4.0.4",
+    "@hile/rsc-build": "1.0.14",
+    "@types/node": "26.2.0",
+    "@types/nodemailer": "8.0.1",
+    "@types/react": "19.2.18",
+    "@types/react-dom": "19.2.4",
+    "fix-esm-import-path": "1.10.3",
+    "pg-mem": "3.0.14",
+    "typescript": "7.0.2",
+    "vitest": "4.1.11"
+  },
+  "gitHead": "a3e825c2a62561f73f49a54720e286f08da63429"
+}