@zlooks.cn/password-auth-server 1.0.4 → 1.0.6

package/.hile-rsc/{build-mtu1gn28-ec03cfb2/client-browser/src-plugin-password-form-3bd63d69e5-BCAMXKEX.js → build-mtwz7fk2-a912695b/client-browser/src-plugin-password-form-3bd63d69e5-DTURXEQT.js}

@@ -27,12 +27,11 @@ import {
   RscLink,
   SizeContext_default,
   TextArea_default,
-  USER_SESSION_COOKIE,
   VariantContext,
   __commonJS,
   __toESM,
   _toConsumableArray,
-  browserApiDispatchResponseSchema,
+  browserApiPath,
   browserApiResponseSchema,
   cloneElement,
   clsx,
@@ -121,7 +120,7 @@ import {
   version,
   warning_default,
   zoomIn
-} from "./chunks/chunk-CZF5VGOJ.js";
+} from "./chunks/chunk-XJNPI5IC.js";
 
 // ../../node_modules/.pnpm/@ant-design+icons-svg@4.5.0/node_modules/@ant-design/icons-svg/lib/asn/SearchOutlined.js
 var require_SearchOutlined = __commonJS({
@@ -519,54 +518,13 @@ var USER_EVENT_CATALOG = defineEventCatalog({
 });
 
 // ../user-shared/dist/index.js
-var USER_BROWSER_API_PUBLIC_ROUTES = Object.freeze([
-  Object.freeze({
-    exact: "/api/auth/methods",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/user/shell",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user",
-    methods: Object.freeze(["GET", "PATCH"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user/sessions",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/transactions",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    prefix: "/api/auth/transactions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/auth/logout",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/session/refresh",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    prefix: "/api/user/sessions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  })
-]);
 var USER_ACCOUNT_HREF = "/user.account/account";
+var USER_BROWSER_AUTH_METHODS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/methods");
+var USER_BROWSER_AUTH_TRANSACTIONS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/transactions");
+var USER_BROWSER_LOGOUT_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/logout");
+var USER_BROWSER_SESSION_REFRESH_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/session/refresh");
+var USER_BROWSER_USER_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/user");
+var USER_BROWSER_USER_SESSIONS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/user/sessions");
 var USER_BROWSER_API_ERROR_CODES = Object.freeze({
   crossOriginRejected: 1001,
   requestRejected: 1002,
@@ -612,6 +570,121 @@ var sessionCookieSchema = external_exports.discriminatedUnion("action", [
   }),
   external_exports.strictObject({ action: external_exports.literal("clear") })
 ]);
+var sessionTokenSchema = external_exports.string().min(1).max(4096);
+var authenticationMethodSchema = external_exports.strictObject({
+  id: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+  label: external_exports.string().trim().min(1).max(80),
+  capabilities: external_exports.strictObject({
+    login: external_exports.boolean(),
+    registration: external_exports.boolean()
+  }),
+  rsc: external_exports.strictObject({
+    pluginId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    slots: external_exports.strictObject({
+      login: absolutePath.optional(),
+      registration: absolutePath.optional()
+    })
+  })
+}).readonly();
+var userEmptyRequestSchema = external_exports.strictObject({}).readonly();
+var userAuthenticationCatalogResponseSchema = external_exports.strictObject({
+  methods: external_exports.array(authenticationMethodSchema).max(64).readonly()
+}).readonly();
+var userAuthenticationBeginRequestSchema = external_exports.strictObject({
+  methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+  intent: external_exports.enum(["login", "registration", "linking", "reauthentication", "recovery"]),
+  loginHint: external_exports.string().trim().min(1).max(320).optional(),
+  requestContext: external_exports.strictObject({ clientKey: external_exports.string().min(16).max(128) })
+}).readonly();
+var userAuthenticationBeginResponseSchema = external_exports.discriminatedUnion("status", [
+  external_exports.strictObject({
+    status: external_exports.literal("input-required"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/)
+  }),
+  external_exports.strictObject({
+    status: external_exports.literal("redirect-required"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    redirectUrl: external_exports.url().max(4096)
+  }),
+  external_exports.strictObject({
+    status: external_exports.literal("pending"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    retryAfterMs: external_exports.number().int().min(250).max(6e4)
+  })
+]).readonly();
+var userAuthenticationCompleteRequestSchema = external_exports.strictObject({
+  input: external_exports.unknown()
+}).readonly();
+var userAuthenticationCompletionResponseSchema = external_exports.discriminatedUnion("status", [
+  external_exports.strictObject({
+    status: external_exports.literal("verified"),
+    session: external_exports.strictObject({ token: sessionTokenSchema, expiresAt: external_exports.iso.datetime({ offset: true }) }),
+    user: external_exports.unknown()
+  }),
+  external_exports.strictObject({ status: external_exports.literal("denied"), code: external_exports.string().min(1).max(128) }),
+  external_exports.strictObject({
+    status: external_exports.literal("pending"),
+    retryAfterMs: external_exports.number().int().min(250).max(6e4)
+  })
+]).readonly();
+var userAccountSchema = external_exports.strictObject({
+  id: external_exports.string().min(1).max(128),
+  displayName: external_exports.string().min(1).max(160).optional(),
+  avatar: external_exports.url({ protocol: /^https?$/ }).max(2048).optional(),
+  homepage: external_exports.url({ protocol: /^https?$/ }).max(2048).optional(),
+  bio: external_exports.string().max(500).optional(),
+  email: external_exports.email().max(320).optional(),
+  emailVerified: external_exports.boolean()
+}).readonly();
+var userAccountReadResponseSchema = external_exports.strictObject({ user: userAccountSchema }).readonly();
+var userAccountUpdateRequestSchema = external_exports.strictObject({ input: external_exports.unknown() }).readonly();
+var userSessionSchema = external_exports.strictObject({
+  id: external_exports.string().min(1).max(128),
+  createdAt: external_exports.iso.datetime(),
+  lastSeenAt: external_exports.iso.datetime(),
+  expiresAt: external_exports.iso.datetime(),
+  revoked: external_exports.boolean()
+}).readonly();
+var userAccountSessionsResponseSchema = external_exports.strictObject({
+  sessions: external_exports.array(userSessionSchema).max(100).readonly()
+}).readonly();
+var userSessionRevokeResponseSchema = external_exports.strictObject({ revoked: external_exports.boolean() }).readonly();
+var userLogoutResponseSchema = external_exports.strictObject({ revoked: external_exports.boolean() }).readonly();
+var userRefreshSessionResponseSchema = external_exports.strictObject({
+  session: external_exports.strictObject({
+    token: sessionTokenSchema,
+    expiresAt: external_exports.iso.datetime({ offset: true }),
+    user: userAccountSchema
+  })
+}).readonly();
+var userEventCatalogResponseSchema = external_exports.strictObject({
+  protocol: external_exports.literal("zlooks.event-catalog"),
+  protocolVersion: external_exports.literal(1),
+  providerId: external_exports.literal("user"),
+  displayName: external_exports.string().min(1).max(160),
+  producer: external_exports.literal(USER_SERVICE_NAMESPACE),
+  contractPackage: external_exports.literal("@zlooks.cn/user-shared"),
+  count: external_exports.literal(5),
+  delivery: external_exports.strictObject({
+    guarantee: external_exports.literal("at-least-once"),
+    deduplicateBy: external_exports.literal("eventId")
+  }),
+  events: external_exports.array(external_exports.strictObject({
+    type: external_exports.string().min(1).max(256),
+    title: external_exports.string().min(1).max(160),
+    description: external_exports.string().min(1).max(1e3),
+    producer: external_exports.literal(USER_SERVICE_NAMESPACE),
+    aggregateType: external_exports.string().min(1).max(128),
+    consumer: external_exports.strictObject({
+      packageName: external_exports.literal("@zlooks.cn/user-shared"),
+      exportName: external_exports.string().min(1).max(128)
+    }),
+    dataSchema: external_exports.record(external_exports.string(), external_exports.unknown())
+  })).length(5).readonly()
+}).readonly();
 var userCurrentUserRequestSchema = external_exports.strictObject({}).readonly();
 var userPublicProfileSchema = external_exports.strictObject({
   id: external_exports.uuid(),
@@ -632,7 +705,9 @@ var userPublicProfilesRequestSchema = external_exports.strictObject({
   userIds: external_exports.array(external_exports.uuid()).min(1).max(100).refine((userIds) => new Set(userIds).size === userIds.length, { message: "User IDs must be unique" }).readonly()
 }).readonly();
 var userPublicProfilesResponseSchema = external_exports.strictObject({
-  users: external_exports.array(userPublicProfileSchema).max(100).refine((users) => new Set(users.map((user) => user.id)).size === users.length, { message: "Public user profiles must be unique" }).readonly()
+  users: external_exports.array(userPublicProfileSchema).max(100).refine((users) => new Set(users.map((user) => user.id)).size === users.length, {
+    message: "Public user profiles must be unique"
+  }).readonly()
 }).readonly();
 var userBrowserApiRequestSchema = external_exports.strictObject({
   method: external_exports.enum(["GET", "POST", "PATCH"]),
@@ -641,24 +716,6 @@ var userBrowserApiRequestSchema = external_exports.strictObject({
   clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
   body: external_exports.unknown().optional()
 }).readonly();
-var userBrowserApiProviderRequestSchema = external_exports.strictObject({
-  method: external_exports.enum(["GET", "POST", "PATCH"]),
-  path: absolutePath,
-  origin: external_exports.string().max(2048).optional(),
-  clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
-  body: external_exports.unknown().optional()
-}).readonly();
-var userBrowserApiProviderResponseSchema = browserApiDispatchResponseSchema.superRefine((response, context) => {
-  for (const [index, effect] of (response.cookieEffects ?? []).entries()) {
-    if (effect.name === USER_SESSION_COOKIE)
-      continue;
-    context.addIssue({
-      code: "custom",
-      message: "User Browser API may only mutate its declared session cookie",
-      path: ["cookieEffects", index, "name"]
-    });
-  }
-}).readonly();
 var userBrowserApiResponseSchema = external_exports.strictObject({
   status: external_exports.number().int().min(200).max(599).refine((status) => status < 300 || status >= 400),
   body: browserApiResponseSchema,
@@ -686,6 +743,9 @@ var userCredentialLifecycleEventSchema = external_exports.strictObject({
 var userCredentialLifecycleResponseSchema = external_exports.strictObject({
   acknowledged: external_exports.literal(true)
 }).readonly();
+function userBrowserTransactionCompletePath(transactionId) {
+  return `${USER_BROWSER_AUTH_TRANSACTIONS_PATH}/${encodeURIComponent(external_exports.string().trim().min(1).max(128).parse(transactionId))}/complete`;
+}
 
 // ../../node_modules/.pnpm/antd@6.6.1_luxon@3.7.2_moment@2.30.1_react-dom@19.2.8_react@19.2.8__react@19.2.8/node_modules/antd/es/_util/getReactMajorVersionCanDelMe.js
 function getReactMajorVersion() {
@@ -4389,7 +4449,7 @@ function PasswordForm(props) {
     if (countdown <= 0) return;
     const timer = window.setInterval(() => setCountdown((value) => Math.max(0, value - 1)), 1e3);
     return () => window.clearInterval(timer);
-  }, [countdown > 0]);
+  }, [countdown]);
   async function ensureTransaction() {
     if (transactionId) return transactionId;
     const created = await beginTransaction(request, props.intent);
@@ -4404,7 +4464,7 @@ function PasswordForm(props) {
       const requestId = pendingSend.current?.email === email ? pendingSend.current.requestId : crypto.randomUUID();
       pendingSend.current = { email, requestId };
       const challenge = await request(
-        `/api/auth/transactions/${encodeURIComponent(currentTransactionId)}/complete`,
+        userBrowserTransactionCompletePath(currentTransactionId),
         {
           method: "POST",
           headers: { "content-type": "application/json" },
@@ -4432,12 +4492,16 @@ function PasswordForm(props) {
         code: values.code,
         ...needsPassword ? { password: values.password } : {}
       } : { action: "password-login", email: values.email, password: values.password };
-      await request(`/api/auth/transactions/${encodeURIComponent(currentTransactionId)}/complete`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        credentials: "same-origin",
-        body: JSON.stringify({ input })
-      }, { errorMessage: "\u6CA1\u6709\u5B8C\u6210\uFF0C\u8BF7\u68C0\u67E5\u8F93\u5165\u540E\u91CD\u8BD5", parse: parseAuthenticationCompletion });
+      await request(
+        userBrowserTransactionCompletePath(currentTransactionId),
+        {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          credentials: "same-origin",
+          body: JSON.stringify({ input })
+        },
+        { errorMessage: "\u6CA1\u6709\u5B8C\u6210\uFF0C\u8BF7\u68C0\u67E5\u8F93\u5165\u540E\u91CD\u8BD5", parse: parseAuthenticationCompletion }
+      );
       if (props.intent === "registration") {
         navigation.replace(USER_ACCOUNT_HREF);
         return;
@@ -4479,7 +4543,10 @@ function PasswordForm(props) {
                   {
                     "aria-label": "\u9009\u62E9\u767B\u5F55\u65B9\u5F0F",
                     block: true,
-                    options: [{ label: "\u5BC6\u7801\u767B\u5F55", value: "password" }, { label: "\u9A8C\u8BC1\u7801\u767B\u5F55", value: "code" }],
+                    options: [
+                      { label: "\u5BC6\u7801\u767B\u5F55", value: "password" },
+                      { label: "\u9A8C\u8BC1\u7801\u767B\u5F55", value: "code" }
+                    ],
                     size: "large",
                     value: mode,
                     onChange: (value) => {
@@ -4492,7 +4559,18 @@ function PasswordForm(props) {
                     }
                   }
                 ) }) : null,
-                /* @__PURE__ */ jsx(form_default.Item, { label: "\u90AE\u7BB1", name: "email", rules: emailRules, children: /* @__PURE__ */ jsx(input_default, { autoComplete: "username", disabled: codeSent, inputMode: "email", maxLength: 320, placeholder: "name@example.com", size: "large", type: "email" }) }),
+                /* @__PURE__ */ jsx(form_default.Item, { label: "\u90AE\u7BB1", name: "email", rules: emailRules, children: /* @__PURE__ */ jsx(
+                  input_default,
+                  {
+                    autoComplete: "username",
+                    disabled: codeSent,
+                    inputMode: "email",
+                    maxLength: 320,
+                    placeholder: "name@example.com",
+                    size: "large",
+                    type: "email"
+                  }
+                ) }),
                 codeSent ? /* @__PURE__ */ jsx(
                   button_default,
                   {
@@ -4511,7 +4589,29 @@ function PasswordForm(props) {
                   }
                 ) : null,
                 usesCode ? /* @__PURE__ */ jsx(form_default.Item, { label: "\u9A8C\u8BC1\u7801", required: true, children: /* @__PURE__ */ jsxs("div", { className: password_form_default.codeRow, children: [
-                  /* @__PURE__ */ jsx(form_default.Item, { noStyle: true, name: "code", rules: [{ required: true, message: "\u8BF7\u8F93\u5165\u9A8C\u8BC1\u7801" }, { len: 6, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" }, { pattern: /^\d{6}$/, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" }], children: /* @__PURE__ */ jsx(input_default, { "aria-label": "\u9A8C\u8BC1\u7801", autoComplete: "one-time-code", inputMode: "numeric", maxLength: 6, placeholder: "6 \u4F4D\u9A8C\u8BC1\u7801", size: "large" }) }),
+                  /* @__PURE__ */ jsx(
+                    form_default.Item,
+                    {
+                      noStyle: true,
+                      name: "code",
+                      rules: [
+                        { required: true, message: "\u8BF7\u8F93\u5165\u9A8C\u8BC1\u7801" },
+                        { len: 6, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" },
+                        { pattern: /^\d{6}$/, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" }
+                      ],
+                      children: /* @__PURE__ */ jsx(
+                        input_default,
+                        {
+                          "aria-label": "\u9A8C\u8BC1\u7801",
+                          autoComplete: "one-time-code",
+                          inputMode: "numeric",
+                          maxLength: 6,
+                          placeholder: "6 \u4F4D\u9A8C\u8BC1\u7801",
+                          size: "large"
+                        }
+                      )
+                    }
+                  ),
                   /* @__PURE__ */ jsx(button_default, { disabled: countdown > 0 || submitting, loading: sending, onClick: sendCode, size: "large", children: countdown > 0 ? `${countdown} \u79D2\u540E\u91CD\u53D1` : codeSent ? "\u91CD\u65B0\u53D1\u9001" : "\u53D1\u9001\u9A8C\u8BC1\u7801" })
                 ] }) }) : null,
                 needsPassword ? /* @__PURE__ */ jsx(
@@ -4532,7 +4632,18 @@ function PasswordForm(props) {
                     )
                   }
                 ) : null,
-                /* @__PURE__ */ jsx(button_default, { block: true, htmlType: "submit", loading: submitting, size: "large", type: "primary", disabled: sending || usesCode && !codeSent, children: copy.submit })
+                /* @__PURE__ */ jsx(
+                  button_default,
+                  {
+                    block: true,
+                    htmlType: "submit",
+                    loading: submitting,
+                    size: "large",
+                    type: "primary",
+                    disabled: sending || usesCode && !codeSent,
+                    children: copy.submit
+                  }
+                )
               ]
             }
           ) }),
@@ -4546,14 +4657,16 @@ function PasswordForm(props) {
   );
 }
 function AlternateLinks({ intent }) {
-  if (intent === "registration") return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
-    "\u5DF2\u7ECF\u6709\u8D26\u53F7\uFF1F",
-    /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
-  ] });
-  if (intent === "recovery") return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
-    "\u60F3\u8D77\u5BC6\u7801\u4E86\uFF1F",
-    /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
-  ] });
+  if (intent === "registration")
+    return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
+      "\u5DF2\u7ECF\u6709\u8D26\u53F7\uFF1F",
+      /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
+    ] });
+  if (intent === "recovery")
+    return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
+      "\u60F3\u8D77\u5BC6\u7801\u4E86\uFF1F",
+      /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
+    ] });
   return /* @__PURE__ */ jsxs("div", { className: password_form_default.alternateLinks, children: [
     /* @__PURE__ */ jsxs("p", { children: [
       /* @__PURE__ */ jsx("span", { children: "\u8FD8\u6CA1\u6709\u8D26\u6237\uFF1F" }),
@@ -4566,12 +4679,16 @@ function AlternateLinks({ intent }) {
   ] });
 }
 async function beginTransaction(request, intent) {
-  return request("/api/auth/transactions", {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    credentials: "same-origin",
-    body: JSON.stringify({ methodId: "password", intent })
-  }, { errorMessage: "\u6682\u65F6\u65E0\u6CD5\u7EE7\u7EED\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", parse: parseTransactionId });
+  return request(
+    USER_BROWSER_AUTH_TRANSACTIONS_PATH,
+    {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      credentials: "same-origin",
+      body: JSON.stringify({ methodId: "password", intent })
+    },
+    { errorMessage: "\u6682\u65F6\u65E0\u6CD5\u7EE7\u7EED\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", parse: parseTransactionId }
+  );
 }
 function parseTransactionId(data) {
   if (data === null || typeof data !== "object" || Array.isArray(data)) throw new Error("Invalid transaction response");
@@ -4589,31 +4706,35 @@ var emailRules = [
 function passwordRules(requireMinimum) {
   return [
     { required: true, message: "\u8BF7\u8F93\u5165\u5BC6\u7801" },
-    ...requireMinimum ? [{
-      validator: async (_rule, value) => {
-        if (!value) return;
-        if (Array.from(value).length < 12) throw new Error("\u5BC6\u7801\u81F3\u5C11\u9700\u8981 12 \u4E2A\u5B57\u7B26");
-        if (new TextEncoder().encode(value).byteLength > 128) throw new Error("\u5BC6\u7801\u8FC7\u957F\uFF0C\u8BF7\u7F29\u77ED\u540E\u91CD\u8BD5");
+    ...requireMinimum ? [
+      {
+        validator: async (_rule, value) => {
+          if (!value) return;
+          if (Array.from(value).length < 12) throw new Error("\u5BC6\u7801\u81F3\u5C11\u9700\u8981 12 \u4E2A\u5B57\u7B26");
+          if (new TextEncoder().encode(value).byteLength > 128) throw new Error("\u5BC6\u7801\u8FC7\u957F\uFF0C\u8BF7\u7F29\u77ED\u540E\u91CD\u8BD5");
+        }
       }
-    }] : [{ max: 128, message: "\u5BC6\u7801\u4E0D\u80FD\u8D85\u8FC7 128 \u4E2A\u5B57\u7B26" }]
+    ] : [{ max: 128, message: "\u5BC6\u7801\u4E0D\u80FD\u8D85\u8FC7 128 \u4E2A\u5B57\u7B26" }]
   ];
 }
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function pageCopy(intent) {
-  if (intent === "registration") return {
-    introduction: "\u9A8C\u8BC1\u90AE\u7BB1\u5E76\u521B\u5EFA\u8D26\u53F7\u540E\uFF0C\u53EF\u4EE5\u7EE7\u7EED\u5B8C\u5584\u8D44\u6599\uFF0C\u6574\u7406\u5C5E\u4E8E\u4F60\u7684\u8BB0\u5F55\u3002",
-    step: "ACCOUNT / REGISTER",
-    title: "\u521B\u5EFA\u8D26\u6237",
-    description: "\u4F7F\u7528\u90AE\u7BB1\u9A8C\u8BC1\u7801\u548C\u5BC6\u7801\u521B\u5EFA\u8D26\u53F7\u3002",
-    submit: "\u521B\u5EFA\u8D26\u53F7"
-  };
-  if (intent === "recovery") return {
-    introduction: "\u9A8C\u8BC1\u6CE8\u518C\u90AE\u7BB1\u540E\u8BBE\u7F6E\u65B0\u5BC6\u7801\uFF0C\u65E7\u8BBE\u5907\u4E0A\u7684\u767B\u5F55\u4F1A\u81EA\u52A8\u9000\u51FA\u3002",
-    step: "ACCOUNT / RECOVERY",
-    title: "\u627E\u56DE\u5BC6\u7801",
-    description: "\u9A8C\u8BC1\u7801\u53EA\u4F1A\u53D1\u9001\u5230\u5DF2\u7ECF\u6CE8\u518C\u7684\u90AE\u7BB1\u3002",
-    submit: "\u66F4\u65B0\u5BC6\u7801\u5E76\u767B\u5F55"
-  };
+  if (intent === "registration")
+    return {
+      introduction: "\u9A8C\u8BC1\u90AE\u7BB1\u5E76\u521B\u5EFA\u8D26\u53F7\u540E\uFF0C\u53EF\u4EE5\u7EE7\u7EED\u5B8C\u5584\u8D44\u6599\uFF0C\u6574\u7406\u5C5E\u4E8E\u4F60\u7684\u8BB0\u5F55\u3002",
+      step: "ACCOUNT / REGISTER",
+      title: "\u521B\u5EFA\u8D26\u6237",
+      description: "\u4F7F\u7528\u90AE\u7BB1\u9A8C\u8BC1\u7801\u548C\u5BC6\u7801\u521B\u5EFA\u8D26\u53F7\u3002",
+      submit: "\u521B\u5EFA\u8D26\u53F7"
+    };
+  if (intent === "recovery")
+    return {
+      introduction: "\u9A8C\u8BC1\u6CE8\u518C\u90AE\u7BB1\u540E\u8BBE\u7F6E\u65B0\u5BC6\u7801\uFF0C\u65E7\u8BBE\u5907\u4E0A\u7684\u767B\u5F55\u4F1A\u81EA\u52A8\u9000\u51FA\u3002",
+      step: "ACCOUNT / RECOVERY",
+      title: "\u627E\u56DE\u5BC6\u7801",
+      description: "\u9A8C\u8BC1\u7801\u53EA\u4F1A\u53D1\u9001\u5230\u5DF2\u7ECF\u6CE8\u518C\u7684\u90AE\u7BB1\u3002",
+      submit: "\u66F4\u65B0\u5BC6\u7801\u5E76\u767B\u5F55"
+    };
   return {
     introduction: "\u767B\u5F55\u540E\u53EF\u4EE5\u7BA1\u7406\u4E2A\u4EBA\u8D44\u6599\u4E0E\u767B\u5F55\u4F1A\u8BDD\u3002",
     step: "ACCOUNT / SIGN IN",

package/.hile-rsc/{build-mtu1gn28-ec03cfb2/client-ssr/chunks/chunk-RMKQVF3F.js → build-mtwz7fk2-a912695b/client-ssr/chunks/chunk-3ROBWYWF.js}

@@ -21286,10 +21286,10 @@ var require_CopyOutlined = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@hile+rsc@1.0.18_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._502f5628b4fa23beb10871f5285e92e2/node_modules/@hile/rsc/dist/client/navigation.js
+// ../../node_modules/.pnpm/@hile+rsc@1.0.21_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._7756791808b6e225b36e83038d404c27/node_modules/@hile/rsc/dist/client/navigation.js
 init_react();
 
-// ../../node_modules/.pnpm/@hile+rsc@1.0.18_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._502f5628b4fa23beb10871f5285e92e2/node_modules/@hile/rsc/dist/client/navigation-internals.js
+// ../../node_modules/.pnpm/@hile+rsc@1.0.21_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._7756791808b6e225b36e83038d404c27/node_modules/@hile/rsc/dist/client/navigation-internals.js
 function resolveRscNavigationUrl(href, currentHref) {
   try {
     const destination = new URL(href, currentHref);
@@ -21307,7 +21307,7 @@ function shouldHandleRscNavigationClick(event, anchor, currentHref) {
   return current !== void 0 && destination !== void 0 && destination.origin === current.origin;
 }
 
-// ../../node_modules/.pnpm/@hile+rsc@1.0.18_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._502f5628b4fa23beb10871f5285e92e2/node_modules/@hile/rsc/dist/client/navigation-runtime.js
+// ../../node_modules/.pnpm/@hile+rsc@1.0.21_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._7756791808b6e225b36e83038d404c27/node_modules/@hile/rsc/dist/client/navigation-runtime.js
 var runtimeStateKey = /* @__PURE__ */ Symbol.for("@hile/rsc/client/navigation/runtime");
 function runtimeState() {
   const scope = globalThis;
@@ -21317,7 +21317,7 @@ function getRscNavigationRuntime() {
   return runtimeState().installations.at(-1)?.navigation;
 }
 
-// ../../node_modules/.pnpm/@hile+rsc@1.0.18_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._502f5628b4fa23beb10871f5285e92e2/node_modules/@hile/rsc/dist/client/navigation.js
+// ../../node_modules/.pnpm/@hile+rsc@1.0.21_react-dom@19.2.8_react@19.2.8__react@19.2.8_webpack@5.109.2_esbuild@0._7756791808b6e225b36e83038d404c27/node_modules/@hile/rsc/dist/client/navigation.js
 function browserLocation() {
   return typeof window === "undefined" ? void 0 : window.location;
 }
@@ -35927,19 +35927,13 @@ function date4(params) {
 config(en_default());
 
 // ../browser-api/dist/index.js
-var BROWSER_API_PROVIDER_DISPATCH_OPERATION = "/browser/dispatch";
-var identifier = external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/);
+var BROWSER_API_CONTROLLER_PREFIX = "/-";
 var namespace = external_exports.string().regex(/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9]*)+$/);
 var absolutePath = external_exports.string().min(1).max(2048).regex(/^\/(?!\/)[^?#\s]*$/);
-var publicApiPath = external_exports.string().min(5).max(2048).regex(/^\/api\/(?!\/)[^?#\s]*$/);
 var instant = external_exports.iso.datetime({ offset: true });
 var cookieName = external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,127}$/);
 var httpMethod = external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]);
-var cookieNames = external_exports.array(cookieName).max(8).refine((names) => new Set(names).size === names.length, "Cookie names must be unique").readonly();
-var publicErrorSchema = external_exports.strictObject({
-  code: external_exports.number().int().safe().refine((code) => code !== 0),
-  message: external_exports.string().trim().min(1).max(500)
-}).readonly();
+var httpHeaderValue = external_exports.string().max(8192);
 var successSchema = external_exports.strictObject({
   code: external_exports.literal(0),
   data: external_exports.unknown().refine((data) => data !== void 0)
@@ -35949,45 +35943,15 @@ var failureSchema = external_exports.strictObject({
   error: external_exports.string().trim().min(1).max(500)
 }).readonly();
 var browserApiResponseSchema = external_exports.union([successSchema, failureSchema]);
-var exactRouteSchema = external_exports.strictObject({
-  exact: publicApiPath,
-  methods: external_exports.array(httpMethod).min(1).max(5).refine((methods) => new Set(methods).size === methods.length, "Methods must be unique").readonly(),
-  forwardCookieNames: cookieNames
-}).readonly();
-var prefixRouteSchema = external_exports.strictObject({
-  prefix: publicApiPath.refine((path) => path.endsWith("/"), "Route prefix must end with /"),
-  methods: external_exports.array(httpMethod).min(1).max(5).refine((methods) => new Set(methods).size === methods.length, "Methods must be unique").readonly(),
-  forwardCookieNames: cookieNames
-}).readonly();
-var browserApiPublicRouteSchema = external_exports.union([exactRouteSchema, prefixRouteSchema]);
-var browserApiProviderLeaseSchema = external_exports.strictObject({
-  issuedAt: instant,
-  expiresAt: instant,
-  sequence: external_exports.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)
-}).refine((lease) => Date.parse(lease.expiresAt) > Date.parse(lease.issuedAt), {
-  message: "Browser API Provider lease must expire after it is issued"
-}).readonly();
-var browserApiProviderAnnouncementSchema = external_exports.strictObject({
-  protocol: external_exports.literal("zlooks.browser-api.provider"),
-  providerId: identifier,
-  instanceId: identifier,
-  namespace,
-  operation: external_exports.literal(BROWSER_API_PROVIDER_DISPATCH_OPERATION),
-  routes: external_exports.array(browserApiPublicRouteSchema).min(1).max(64).refine((routes) => !routes.some((route, index) => routes.slice(index + 1).some((candidate) => routesOverlap(route, candidate))), "Provider routes must not overlap for the same HTTP method").readonly(),
-  writableCookieNames: cookieNames,
-  errors: external_exports.strictObject({
-    invalidRequest: publicErrorSchema,
-    unavailable: publicErrorSchema
-  }).readonly(),
-  lease: browserApiProviderLeaseSchema
-}).readonly();
-var browserApiProviderSnapshotSchema = external_exports.strictObject({
-  topic: external_exports.string().min(1).max(512),
-  payload: browserApiProviderAnnouncementSchema,
-  publishers: external_exports.array(external_exports.strictObject({
-    host: external_exports.string().trim().min(1).max(253),
-    port: external_exports.number().int().min(1).max(65535)
-  }).readonly()).length(1).readonly()
+var browserApiHttpRequestHeadersSchema = external_exports.strictObject({
+  accept: httpHeaderValue.optional(),
+  "accept-language": httpHeaderValue.optional(),
+  "content-type": httpHeaderValue.optional(),
+  "if-modified-since": httpHeaderValue.optional(),
+  "if-none-match": httpHeaderValue.optional(),
+  origin: external_exports.string().max(2048).optional(),
+  range: httpHeaderValue.optional(),
+  referer: httpHeaderValue.optional()
 }).readonly();
 var queryValue = external_exports.union([
   external_exports.string().max(512),
@@ -36023,10 +35987,11 @@ var browserApiCookieEffectSchema = external_exports.discriminatedUnion("action",
     name: cookieName
   })
 ]).readonly();
+var browserApiCookieEffectsSchema = external_exports.array(browserApiCookieEffectSchema).max(8).refine((effects) => new Set(effects.map((effect) => effect.name)).size === effects.length, "Cookie effects must target unique names").readonly();
 var browserApiDispatchResponseSchema = external_exports.strictObject({
   status: external_exports.number().int().min(200).max(599).refine((status) => status < 300 || status >= 400),
   body: browserApiResponseSchema,
-  cookieEffects: external_exports.array(browserApiCookieEffectSchema).max(8).refine((effects) => new Set(effects.map((effect) => effect.name)).size === effects.length, "Cookie effects must target unique names").readonly().optional()
+  cookieEffects: browserApiCookieEffectsSchema.optional()
 }).superRefine((response, context) => {
   const httpSucceeded = response.status >= 200 && response.status < 300;
   if (httpSucceeded === !isBrowserApiFailure(response.body))
@@ -36037,26 +36002,15 @@ var browserApiDispatchResponseSchema = external_exports.strictObject({
     path: ["body", "code"]
   });
 }).readonly();
+function browserApiPath(serviceNamespace, microUrl) {
+  return `${BROWSER_API_CONTROLLER_PREFIX}/${namespace.parse(serviceNamespace)}${absolutePath.parse(microUrl)}`;
+}
 function parseBrowserApiResponse(input) {
   return browserApiResponseSchema.parse(input);
 }
 function isBrowserApiFailure(response) {
   return response.code !== 0;
 }
-function routesOverlap(left, right) {
-  if (!left.methods.some((method) => right.methods.includes(method)))
-    return false;
-  if ("exact" in left && "exact" in right)
-    return left.exact === right.exact;
-  if ("prefix" in left && "prefix" in right) {
-    return left.prefix.startsWith(right.prefix) || right.prefix.startsWith(left.prefix);
-  }
-  if ("exact" in left && "prefix" in right)
-    return left.exact.startsWith(right.prefix);
-  if ("prefix" in left && "exact" in right)
-    return right.exact.startsWith(left.prefix);
-  return false;
-}
 
 // ../ui/dist/request-runtime.js
 var DEFAULT_ERROR_MESSAGE = "\u8BF7\u6C42\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5";
@@ -36149,7 +36103,6 @@ function useRequest() {
 }
 
 // ../utils/dist/index.js
-var USER_SESSION_COOKIE = "zlooks_session";
 function deepFreeze(value) {
   if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
     Object.freeze(value);
@@ -36239,7 +36192,6 @@ export {
   require_lib14 as require_lib13,
   AppConfigContext,
   context_default,
-  USER_SESSION_COOKIE,
   deepFreeze,
   require_lib8 as require_lib14,
   require_EditOutlined,
@@ -36250,7 +36202,7 @@ export {
   useZlooksApp,
   external_exports,
   browserApiResponseSchema,
-  browserApiDispatchResponseSchema,
+  browserApiPath,
   isBrowserApiFailure,
   isRequestError,
   useRequest