@zlooks.cn/password-auth-server 1.0.4 → 1.0.6

package/.hile-rsc/{build-mtu1gn28-ec03cfb2 → build-mtwz7fk2-a912695b}/server-rsc/index.js

@@ -8,7 +8,6 @@ var __export = (target, all) => {
 import { URL as URL2 } from "node:url";
 
 // ../utils/dist/index.js
-var USER_SESSION_COOKIE = "zlooks_session";
 function deepFreeze(value) {
   if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
     Object.freeze(value);
@@ -14617,6 +14616,14 @@ var globalConfigMcpProfileUpdateSchema = external_exports.strictObject({
   expectedRevision: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
   value: siteProfileSchema
 });
+var globalConfigAuditActorSchema = external_exports.string().trim().min(1).max(256);
+var globalConfigPresentationUpdateCommandSchema = globalConfigMcpUpdateSchema.extend({
+  actor: globalConfigAuditActorSchema
+});
+var globalConfigProfileUpdateCommandSchema = globalConfigMcpProfileUpdateSchema.extend({
+  actor: globalConfigAuditActorSchema
+});
+var globalConfigEmptyRequestSchema = external_exports.strictObject({});
 function parseSitePresentationSnapshot(input) {
   return deepFreeze(sitePresentationSnapshotSchema.parse(input));
 }
@@ -14629,19 +14636,13 @@ function parseGlobalConfigRscSnapshot(input) {
 }
 
 // ../browser-api/dist/index.js
-var BROWSER_API_PROVIDER_DISPATCH_OPERATION = "/browser/dispatch";
-var identifier2 = external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/);
+var BROWSER_API_CONTROLLER_PREFIX = "/-";
 var namespace = external_exports.string().regex(/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9]*)+$/);
 var absolutePath = external_exports.string().min(1).max(2048).regex(/^\/(?!\/)[^?#\s]*$/);
-var publicApiPath = external_exports.string().min(5).max(2048).regex(/^\/api\/(?!\/)[^?#\s]*$/);
 var instant = external_exports.iso.datetime({ offset: true });
 var cookieName = external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,127}$/);
 var httpMethod = external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]);
-var cookieNames = external_exports.array(cookieName).max(8).refine((names) => new Set(names).size === names.length, "Cookie names must be unique").readonly();
-var publicErrorSchema = external_exports.strictObject({
-  code: external_exports.number().int().safe().refine((code) => code !== 0),
-  message: external_exports.string().trim().min(1).max(500)
-}).readonly();
+var httpHeaderValue = external_exports.string().max(8192);
 var successSchema = external_exports.strictObject({
   code: external_exports.literal(0),
   data: external_exports.unknown().refine((data) => data !== void 0)
@@ -14651,45 +14652,15 @@ var failureSchema = external_exports.strictObject({
   error: external_exports.string().trim().min(1).max(500)
 }).readonly();
 var browserApiResponseSchema = external_exports.union([successSchema, failureSchema]);
-var exactRouteSchema = external_exports.strictObject({
-  exact: publicApiPath,
-  methods: external_exports.array(httpMethod).min(1).max(5).refine((methods) => new Set(methods).size === methods.length, "Methods must be unique").readonly(),
-  forwardCookieNames: cookieNames
-}).readonly();
-var prefixRouteSchema = external_exports.strictObject({
-  prefix: publicApiPath.refine((path) => path.endsWith("/"), "Route prefix must end with /"),
-  methods: external_exports.array(httpMethod).min(1).max(5).refine((methods) => new Set(methods).size === methods.length, "Methods must be unique").readonly(),
-  forwardCookieNames: cookieNames
-}).readonly();
-var browserApiPublicRouteSchema = external_exports.union([exactRouteSchema, prefixRouteSchema]);
-var browserApiProviderLeaseSchema = external_exports.strictObject({
-  issuedAt: instant,
-  expiresAt: instant,
-  sequence: external_exports.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)
-}).refine((lease) => Date.parse(lease.expiresAt) > Date.parse(lease.issuedAt), {
-  message: "Browser API Provider lease must expire after it is issued"
-}).readonly();
-var browserApiProviderAnnouncementSchema = external_exports.strictObject({
-  protocol: external_exports.literal("zlooks.browser-api.provider"),
-  providerId: identifier2,
-  instanceId: identifier2,
-  namespace,
-  operation: external_exports.literal(BROWSER_API_PROVIDER_DISPATCH_OPERATION),
-  routes: external_exports.array(browserApiPublicRouteSchema).min(1).max(64).refine((routes) => !routes.some((route, index) => routes.slice(index + 1).some((candidate) => routesOverlap(route, candidate))), "Provider routes must not overlap for the same HTTP method").readonly(),
-  writableCookieNames: cookieNames,
-  errors: external_exports.strictObject({
-    invalidRequest: publicErrorSchema,
-    unavailable: publicErrorSchema
-  }).readonly(),
-  lease: browserApiProviderLeaseSchema
-}).readonly();
-var browserApiProviderSnapshotSchema = external_exports.strictObject({
-  topic: external_exports.string().min(1).max(512),
-  payload: browserApiProviderAnnouncementSchema,
-  publishers: external_exports.array(external_exports.strictObject({
-    host: external_exports.string().trim().min(1).max(253),
-    port: external_exports.number().int().min(1).max(65535)
-  }).readonly()).length(1).readonly()
+var browserApiHttpRequestHeadersSchema = external_exports.strictObject({
+  accept: httpHeaderValue.optional(),
+  "accept-language": httpHeaderValue.optional(),
+  "content-type": httpHeaderValue.optional(),
+  "if-modified-since": httpHeaderValue.optional(),
+  "if-none-match": httpHeaderValue.optional(),
+  origin: external_exports.string().max(2048).optional(),
+  range: httpHeaderValue.optional(),
+  referer: httpHeaderValue.optional()
 }).readonly();
 var queryValue = external_exports.union([
   external_exports.string().max(512),
@@ -14725,10 +14696,11 @@ var browserApiCookieEffectSchema = external_exports.discriminatedUnion("action",
     name: cookieName
   })
 ]).readonly();
+var browserApiCookieEffectsSchema = external_exports.array(browserApiCookieEffectSchema).max(8).refine((effects) => new Set(effects.map((effect) => effect.name)).size === effects.length, "Cookie effects must target unique names").readonly();
 var browserApiDispatchResponseSchema = external_exports.strictObject({
   status: external_exports.number().int().min(200).max(599).refine((status) => status < 300 || status >= 400),
   body: browserApiResponseSchema,
-  cookieEffects: external_exports.array(browserApiCookieEffectSchema).max(8).refine((effects) => new Set(effects.map((effect) => effect.name)).size === effects.length, "Cookie effects must target unique names").readonly().optional()
+  cookieEffects: browserApiCookieEffectsSchema.optional()
 }).superRefine((response, context) => {
   const httpSucceeded = response.status >= 200 && response.status < 300;
   if (httpSucceeded === !isBrowserApiFailure(response.body))
@@ -14739,23 +14711,12 @@ var browserApiDispatchResponseSchema = external_exports.strictObject({
     path: ["body", "code"]
   });
 }).readonly();
+function browserApiPath(serviceNamespace2, microUrl) {
+  return `${BROWSER_API_CONTROLLER_PREFIX}/${namespace.parse(serviceNamespace2)}${absolutePath.parse(microUrl)}`;
+}
 function isBrowserApiFailure(response) {
   return response.code !== 0;
 }
-function routesOverlap(left, right) {
-  if (!left.methods.some((method) => right.methods.includes(method)))
-    return false;
-  if ("exact" in left && "exact" in right)
-    return left.exact === right.exact;
-  if ("prefix" in left && "prefix" in right) {
-    return left.prefix.startsWith(right.prefix) || right.prefix.startsWith(left.prefix);
-  }
-  if ("exact" in left && "prefix" in right)
-    return left.exact.startsWith(right.prefix);
-  if ("prefix" in left && "exact" in right)
-    return right.exact.startsWith(left.prefix);
-  return false;
-}
 
 // ../user-shared/dist/identity.js
 var USER_SERVICE_NAMESPACE = "cn.zlooks.user.server";
@@ -15113,53 +15074,12 @@ var USER_EVENT_CATALOG = defineEventCatalog({
 });
 
 // ../user-shared/dist/index.js
-var USER_BROWSER_API_PUBLIC_ROUTES = Object.freeze([
-  Object.freeze({
-    exact: "/api/auth/methods",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/user/shell",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user",
-    methods: Object.freeze(["GET", "PATCH"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user/sessions",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/transactions",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    prefix: "/api/auth/transactions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/auth/logout",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/session/refresh",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    prefix: "/api/user/sessions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  })
-]);
+var USER_BROWSER_AUTH_METHODS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/methods");
+var USER_BROWSER_AUTH_TRANSACTIONS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/transactions");
+var USER_BROWSER_LOGOUT_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/logout");
+var USER_BROWSER_SESSION_REFRESH_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/session/refresh");
+var USER_BROWSER_USER_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/user");
+var USER_BROWSER_USER_SESSIONS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/user/sessions");
 var USER_BROWSER_API_ERROR_CODES = Object.freeze({
   crossOriginRejected: 1001,
   requestRejected: 1002,
@@ -15205,6 +15125,121 @@ var sessionCookieSchema = external_exports.discriminatedUnion("action", [
   }),
   external_exports.strictObject({ action: external_exports.literal("clear") })
 ]);
+var sessionTokenSchema = external_exports.string().min(1).max(4096);
+var authenticationMethodSchema = external_exports.strictObject({
+  id: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+  label: external_exports.string().trim().min(1).max(80),
+  capabilities: external_exports.strictObject({
+    login: external_exports.boolean(),
+    registration: external_exports.boolean()
+  }),
+  rsc: external_exports.strictObject({
+    pluginId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    slots: external_exports.strictObject({
+      login: absolutePath2.optional(),
+      registration: absolutePath2.optional()
+    })
+  })
+}).readonly();
+var userEmptyRequestSchema = external_exports.strictObject({}).readonly();
+var userAuthenticationCatalogResponseSchema = external_exports.strictObject({
+  methods: external_exports.array(authenticationMethodSchema).max(64).readonly()
+}).readonly();
+var userAuthenticationBeginRequestSchema = external_exports.strictObject({
+  methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+  intent: external_exports.enum(["login", "registration", "linking", "reauthentication", "recovery"]),
+  loginHint: external_exports.string().trim().min(1).max(320).optional(),
+  requestContext: external_exports.strictObject({ clientKey: external_exports.string().min(16).max(128) })
+}).readonly();
+var userAuthenticationBeginResponseSchema = external_exports.discriminatedUnion("status", [
+  external_exports.strictObject({
+    status: external_exports.literal("input-required"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/)
+  }),
+  external_exports.strictObject({
+    status: external_exports.literal("redirect-required"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    redirectUrl: external_exports.url().max(4096)
+  }),
+  external_exports.strictObject({
+    status: external_exports.literal("pending"),
+    transactionId: external_exports.uuid(),
+    methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
+    retryAfterMs: external_exports.number().int().min(250).max(6e4)
+  })
+]).readonly();
+var userAuthenticationCompleteRequestSchema = external_exports.strictObject({
+  input: external_exports.unknown()
+}).readonly();
+var userAuthenticationCompletionResponseSchema = external_exports.discriminatedUnion("status", [
+  external_exports.strictObject({
+    status: external_exports.literal("verified"),
+    session: external_exports.strictObject({ token: sessionTokenSchema, expiresAt: external_exports.iso.datetime({ offset: true }) }),
+    user: external_exports.unknown()
+  }),
+  external_exports.strictObject({ status: external_exports.literal("denied"), code: external_exports.string().min(1).max(128) }),
+  external_exports.strictObject({
+    status: external_exports.literal("pending"),
+    retryAfterMs: external_exports.number().int().min(250).max(6e4)
+  })
+]).readonly();
+var userAccountSchema = external_exports.strictObject({
+  id: external_exports.string().min(1).max(128),
+  displayName: external_exports.string().min(1).max(160).optional(),
+  avatar: external_exports.url({ protocol: /^https?$/ }).max(2048).optional(),
+  homepage: external_exports.url({ protocol: /^https?$/ }).max(2048).optional(),
+  bio: external_exports.string().max(500).optional(),
+  email: external_exports.email().max(320).optional(),
+  emailVerified: external_exports.boolean()
+}).readonly();
+var userAccountReadResponseSchema = external_exports.strictObject({ user: userAccountSchema }).readonly();
+var userAccountUpdateRequestSchema = external_exports.strictObject({ input: external_exports.unknown() }).readonly();
+var userSessionSchema = external_exports.strictObject({
+  id: external_exports.string().min(1).max(128),
+  createdAt: external_exports.iso.datetime(),
+  lastSeenAt: external_exports.iso.datetime(),
+  expiresAt: external_exports.iso.datetime(),
+  revoked: external_exports.boolean()
+}).readonly();
+var userAccountSessionsResponseSchema = external_exports.strictObject({
+  sessions: external_exports.array(userSessionSchema).max(100).readonly()
+}).readonly();
+var userSessionRevokeResponseSchema = external_exports.strictObject({ revoked: external_exports.boolean() }).readonly();
+var userLogoutResponseSchema = external_exports.strictObject({ revoked: external_exports.boolean() }).readonly();
+var userRefreshSessionResponseSchema = external_exports.strictObject({
+  session: external_exports.strictObject({
+    token: sessionTokenSchema,
+    expiresAt: external_exports.iso.datetime({ offset: true }),
+    user: userAccountSchema
+  })
+}).readonly();
+var userEventCatalogResponseSchema = external_exports.strictObject({
+  protocol: external_exports.literal("zlooks.event-catalog"),
+  protocolVersion: external_exports.literal(1),
+  providerId: external_exports.literal("user"),
+  displayName: external_exports.string().min(1).max(160),
+  producer: external_exports.literal(USER_SERVICE_NAMESPACE),
+  contractPackage: external_exports.literal("@zlooks.cn/user-shared"),
+  count: external_exports.literal(5),
+  delivery: external_exports.strictObject({
+    guarantee: external_exports.literal("at-least-once"),
+    deduplicateBy: external_exports.literal("eventId")
+  }),
+  events: external_exports.array(external_exports.strictObject({
+    type: external_exports.string().min(1).max(256),
+    title: external_exports.string().min(1).max(160),
+    description: external_exports.string().min(1).max(1e3),
+    producer: external_exports.literal(USER_SERVICE_NAMESPACE),
+    aggregateType: external_exports.string().min(1).max(128),
+    consumer: external_exports.strictObject({
+      packageName: external_exports.literal("@zlooks.cn/user-shared"),
+      exportName: external_exports.string().min(1).max(128)
+    }),
+    dataSchema: external_exports.record(external_exports.string(), external_exports.unknown())
+  })).length(5).readonly()
+}).readonly();
 var userCurrentUserRequestSchema = external_exports.strictObject({}).readonly();
 var userPublicProfileSchema = external_exports.strictObject({
   id: external_exports.uuid(),
@@ -15225,7 +15260,9 @@ var userPublicProfilesRequestSchema = external_exports.strictObject({
   userIds: external_exports.array(external_exports.uuid()).min(1).max(100).refine((userIds) => new Set(userIds).size === userIds.length, { message: "User IDs must be unique" }).readonly()
 }).readonly();
 var userPublicProfilesResponseSchema = external_exports.strictObject({
-  users: external_exports.array(userPublicProfileSchema).max(100).refine((users) => new Set(users.map((user) => user.id)).size === users.length, { message: "Public user profiles must be unique" }).readonly()
+  users: external_exports.array(userPublicProfileSchema).max(100).refine((users) => new Set(users.map((user) => user.id)).size === users.length, {
+    message: "Public user profiles must be unique"
+  }).readonly()
 }).readonly();
 var userBrowserApiRequestSchema = external_exports.strictObject({
   method: external_exports.enum(["GET", "POST", "PATCH"]),
@@ -15234,24 +15271,6 @@ var userBrowserApiRequestSchema = external_exports.strictObject({
   clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
   body: external_exports.unknown().optional()
 }).readonly();
-var userBrowserApiProviderRequestSchema = external_exports.strictObject({
-  method: external_exports.enum(["GET", "POST", "PATCH"]),
-  path: absolutePath2,
-  origin: external_exports.string().max(2048).optional(),
-  clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
-  body: external_exports.unknown().optional()
-}).readonly();
-var userBrowserApiProviderResponseSchema = browserApiDispatchResponseSchema.superRefine((response, context) => {
-  for (const [index, effect] of (response.cookieEffects ?? []).entries()) {
-    if (effect.name === USER_SESSION_COOKIE)
-      continue;
-    context.addIssue({
-      code: "custom",
-      message: "User Browser API may only mutate its declared session cookie",
-      path: ["cookieEffects", index, "name"]
-    });
-  }
-}).readonly();
 var userBrowserApiResponseSchema = external_exports.strictObject({
   status: external_exports.number().int().min(200).max(599).refine((status) => status < 300 || status >= 400),
   body: browserApiResponseSchema,
@@ -15350,7 +15369,7 @@ var __hileRemoteClientBoundary = __hileRegisterClientReference(function() {
 function __hileDefault(props) {
   return React.createElement(__hileRemoteClientBoundary, {
     pluginId: "auth.password",
-    buildId: "build-mtu1gn28-ec03cfb2",
+    buildId: "build-mtwz7fk2-a912695b",
     referenceId: "auth.password/src/plugin/password-form#default",
     exportName: "default",
     props
@@ -15367,7 +15386,7 @@ var __hileRemoteClientBoundary2 = __hileRegisterClientReference2(function() {
 function __hileDefault2(props) {
   return React2.createElement(__hileRemoteClientBoundary2, {
     pluginId: "auth.password",
-    buildId: "build-mtu1gn28-ec03cfb2",
+    buildId: "build-mtwz7fk2-a912695b",
     referenceId: "auth.password/src/plugin/page-frame#default",
     exportName: "default",
     props

package/dist/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAaV,CAAC;AAUH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AACD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;AAClE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,yBAAyB,GAAG,kBAAkB,CAmB5F"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6BV,CAAC;AAaH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC/B;AACD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,CAAA;AACjE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,yBAAyB,GAAG,kBAAkB,CAiC5F"}

package/dist/config/schema.js

@@ -2,10 +2,26 @@ import { emailConfigSchema, postgresConfigSchema, redisConfigSchema } from '@zlo
 import { deepFreeze, joinKeyPrefix } from '@zlooks.cn/utils';
 import { z } from 'zod';
 const schema = z.strictObject({
-    infrastructure: z.strictObject({ postgres: postgresConfigSchema, redis: redisConfigSchema, email: emailConfigSchema }),
-    discovery: z.strictObject({ instanceId: z.literal('password-auth'), generation: z.literal(2), leaseMs: z.literal(10_000) }),
+    infrastructure: z.strictObject({
+        postgres: postgresConfigSchema,
+        redis: redisConfigSchema,
+        email: emailConfigSchema,
+    }),
+    discovery: z.strictObject({
+        instanceId: z.literal('password-auth'),
+        generation: z.literal(2),
+        leaseMs: z.literal(10_000),
+    }),
     rsc: z.strictObject({ generation: z.literal(2), priority: z.literal(100) }),
-    password: z.strictObject({ minLength: z.literal(12), maxLength: z.literal(128), memoryCostKiB: z.literal(65_536), timeCost: z.literal(3), parallelism: z.literal(1), maxFailedAttempts: z.literal(5), lockoutMs: z.literal(900_000) }),
+    password: z.strictObject({
+        minLength: z.literal(12),
+        maxLength: z.literal(128),
+        memoryCostKiB: z.literal(65_536),
+        timeCost: z.literal(3),
+        parallelism: z.literal(1),
+        maxFailedAttempts: z.literal(5),
+        lockoutMs: z.literal(900_000),
+    }),
     verification: z.strictObject({
         hmacKey: z.string(),
         codeTtlMs: z.literal(600_000),
@@ -16,7 +32,10 @@ const schema = z.strictObject({
     }),
 });
 const passwordAuthSourceSchema = z.strictObject({
-    verificationCodeHmacKey: z.string().regex(/^[A-Za-z0-9+/]{43}=$/).refine((value) => {
+    verificationCodeHmacKey: z
+        .string()
+        .regex(/^[A-Za-z0-9+/]{43}=$/)
+        .refine((value) => {
         try {
             return Buffer.from(value, 'base64').byteLength === 32;
         }
@@ -31,10 +50,22 @@ export function parsePasswordAuthConfig(input) {
     const email = emailConfigSchema.parse(input.email);
     const passwordAuth = passwordAuthSourceSchema.parse(input.passwordAuth);
     return deepFreeze(schema.parse({
-        infrastructure: { postgres, redis: { ...redis, keyPrefix: joinKeyPrefix(redis.keyPrefix, 'password-auth') }, email },
+        infrastructure: {
+            postgres,
+            redis: { ...redis, keyPrefix: joinKeyPrefix(redis.keyPrefix, 'password-auth') },
+            email,
+        },
         discovery: { instanceId: 'password-auth', generation: 2, leaseMs: 10_000 },
         rsc: { generation: 2, priority: 100 },
-        password: { minLength: 12, maxLength: 128, memoryCostKiB: 65_536, timeCost: 3, parallelism: 1, maxFailedAttempts: 5, lockoutMs: 900_000 },
+        password: {
+            minLength: 12,
+            maxLength: 128,
+            memoryCostKiB: 65_536,
+            timeCost: 3,
+            parallelism: 1,
+            maxFailedAttempts: 5,
+            lockoutMs: 900_000,
+        },
         verification: {
             hmacKey: passwordAuth.verificationCodeHmacKey,
             codeTtlMs: 600_000,

package/dist/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtH,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3H,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3E,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACtO,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACtC,CAAC;CACH,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9C,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EAAE,iEAAiE,CAAC;CACtE,CAAC,CAAC;AAQH,MAAM,UAAU,uBAAuB,CAAC,KAAgC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7B,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE;QACpH,SAAS,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;QAC1E,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACrC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;QACzI,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY,CAAC,uBAAuB;YAC7C,SAAS,EAAE,OAAO;YAClB,gBAAgB,EAAE,MAAM;YACxB,sBAAsB,EAAE,CAAC;YACzB,uBAAuB,EAAE,CAAC;YAC1B,uBAAuB,EAAE,CAAC;SAC3B;KACF,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC;QAC7B,QAAQ,EAAE,oBAAoB;QAC9B,KAAK,EAAE,iBAAiB;QACxB,KAAK,EAAE,iBAAiB;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACtC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3B,CAAC;IACF,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3E,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACzB,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KAC9B,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACtC,CAAC;CACH,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9C,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EAAE,iEAAiE,CAAC;CACxE,CAAC,CAAC;AAQH,MAAM,UAAU,uBAAuB,CAAC,KAAgC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,OAAO,UAAU,CACf,MAAM,CAAC,KAAK,CAAC;QACX,cAAc,EAAE;YACd,QAAQ;YACR,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE;YAC/E,KAAK;SACN;QACD,SAAS,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;QAC1E,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACrC,QAAQ,EAAE;YACR,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,MAAM;YACrB,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,SAAS,EAAE,OAAO;SACnB;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY,CAAC,uBAAuB;YAC7C,SAAS,EAAE,OAAO;YAClB,gBAAgB,EAAE,MAAM;YACxB,sBAAsB,EAAE,CAAC;YACzB,uBAAuB,EAAE,CAAC;YAC1B,uBAAuB,EAAE,CAAC;SAC3B;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/messages/auth-extension/begin.msg.js

@@ -1,8 +1,9 @@
-import { loadService } from '@hile/core';
 import { defineMicroMessage } from '@hile/micro';
-import passwordRuntimeService from '../../services/password-runtime.service.js';
-export default defineMicroMessage(async ({ data }) => {
-    const runtime = await loadService(passwordRuntimeService);
-    return runtime.begin(data);
+import { loadModel } from '@hile/model';
+import { authExtensionBeginRequestSchema } from '@zlooks.cn/auth-extension-contract';
+import beginAuthenticationModel from '../../models/begin-authentication.model.js';
+export default defineMicroMessage(async ({ data, invocation }) => {
+    const request = authExtensionBeginRequestSchema.parse(data);
+    return loadModel(beginAuthenticationModel, request, invocation);
 });
 //# sourceMappingURL=begin.msg.js.map

package/dist/messages/auth-extension/begin.msg.js.map

@@ -1 +1 @@
-{"version":3,"file":"begin.msg.js","sourceRoot":"","sources":["../../../src/messages/auth-extension/begin.msg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,sBAAsB,MAAM,4CAA4C,CAAC;AAEhF,eAAe,kBAAkB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"begin.msg.js","sourceRoot":"","sources":["../../../src/messages/auth-extension/begin.msg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,wBAAwB,MAAM,4CAA4C,CAAC;AAElF,eAAe,kBAAkB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/D,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,SAAS,CAAC,wBAAwB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC"}

package/dist/messages/auth-extension/complete.msg.js

@@ -1,8 +1,9 @@
-import { loadService } from '@hile/core';
 import { defineMicroMessage } from '@hile/micro';
-import passwordRuntimeService from '../../services/password-runtime.service.js';
-export default defineMicroMessage(async ({ data }) => {
-    const runtime = await loadService(passwordRuntimeService);
-    return runtime.complete(data);
+import { loadModel } from '@hile/model';
+import { authExtensionCompleteRequestSchema } from '@zlooks.cn/auth-extension-contract';
+import completeAuthenticationModel from '../../models/complete-authentication.model.js';
+export default defineMicroMessage(async ({ data, invocation }) => {
+    const request = authExtensionCompleteRequestSchema.parse(data);
+    return loadModel(completeAuthenticationModel, request, invocation);
 });
 //# sourceMappingURL=complete.msg.js.map

package/dist/messages/auth-extension/complete.msg.js.map

@@ -1 +1 @@
-{"version":3,"file":"complete.msg.js","sourceRoot":"","sources":["../../../src/messages/auth-extension/complete.msg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,sBAAsB,MAAM,4CAA4C,CAAC;AAEhF,eAAe,kBAAkB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"complete.msg.js","sourceRoot":"","sources":["../../../src/messages/auth-extension/complete.msg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,2BAA2B,MAAM,+CAA+C,CAAC;AAExF,eAAe,kBAAkB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/D,MAAM,OAAO,GAAG,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC,2BAA2B,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC"}

package/dist/models/begin-authentication.model.d.ts

@@ -0,0 +1,22 @@
+declare const _default: import("@hile/model").ModelDefinition<{
+    transaction: {
+        id: string;
+        intent: "linking" | "login" | "reauthentication" | "recovery" | "registration";
+        expiresAt: string;
+    };
+    methodId: string;
+    loginHint?: string | undefined;
+}, {
+    status: "input-required";
+    providerState: string;
+} | {
+    status: "redirect-required";
+    providerState: string;
+    redirectUrl: string;
+} | {
+    status: "pending";
+    providerState: string;
+    retryAfterMs: number;
+}>;
+export default _default;
+//# sourceMappingURL=begin-authentication.model.d.ts.map

package/dist/models/begin-authentication.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"begin-authentication.model.d.ts","sourceRoot":"","sources":["../../src/models/begin-authentication.model.ts"],"names":[],"mappings":""}

package/dist/models/begin-authentication.model.js

@@ -0,0 +1,13 @@
+import { defineModel } from '@hile/model';
+import { authExtensionBeginRequestSchema, authExtensionBeginResponseSchema, } from '@zlooks.cn/auth-extension-contract';
+import passwordRuntimeService from '../services/password-runtime.service.js';
+export default defineModel({
+    services: [passwordRuntimeService],
+    async main([authentication], input, invocation) {
+        invocation.signal.throwIfAborted();
+        const result = await authentication.begin(authExtensionBeginRequestSchema.parse(input));
+        invocation.signal.throwIfAborted();
+        return authExtensionBeginResponseSchema.parse(result);
+    },
+});
+//# sourceMappingURL=begin-authentication.model.js.map

package/dist/models/begin-authentication.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"begin-authentication.model.js","sourceRoot":"","sources":["../../src/models/begin-authentication.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GAEjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,sBAAsB,MAAM,yCAAyC,CAAC;AAE7E,eAAe,WAAW,CAAC;IACzB,QAAQ,EAAE,CAAC,sBAAsB,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,EAAE,KAAgC,EAAE,UAAU;QACvE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACxF,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACnC,OAAO,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;CACF,CAAC,CAAC"}

package/dist/models/complete-authentication.model.d.ts

@@ -0,0 +1,35 @@
+declare const _default: import("@hile/model").ModelDefinition<{
+    transaction: {
+        id: string;
+        intent: "linking" | "login" | "reauthentication" | "recovery" | "registration";
+        expiresAt: string;
+    };
+    methodId: string;
+    providerState: string;
+    input: unknown;
+}, {
+    status: "verified";
+    assertion: {
+        protocol: "zlooks.auth-extension.identity-assertion";
+        transactionId: string;
+        extensionId: string;
+        methodId: string;
+        subject: string;
+        issuedAt: string;
+        expiresAt: string;
+        attributes: {
+            displayName?: string | undefined;
+            email?: string | undefined;
+            emailVerified?: boolean | undefined;
+        };
+    };
+} | {
+    status: "denied";
+    code: "account-already-exists" | "account-disabled" | "account-not-found" | "delivery-failed" | "expired" | "invalid-credentials" | "invalid-verification-code" | "policy-rejected" | "rate-limited";
+} | {
+    status: "pending";
+    providerState: string;
+    retryAfterMs: number;
+}>;
+export default _default;
+//# sourceMappingURL=complete-authentication.model.d.ts.map

package/dist/models/complete-authentication.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-authentication.model.d.ts","sourceRoot":"","sources":["../../src/models/complete-authentication.model.ts"],"names":[],"mappings":""}

package/dist/models/complete-authentication.model.js

@@ -0,0 +1,13 @@
+import { defineModel } from '@hile/model';
+import { authExtensionCompleteRequestSchema, authExtensionCompleteResponseSchema, } from '@zlooks.cn/auth-extension-contract';
+import passwordRuntimeService from '../services/password-runtime.service.js';
+export default defineModel({
+    services: [passwordRuntimeService],
+    async main([authentication], input, invocation) {
+        invocation.signal.throwIfAborted();
+        const result = await authentication.complete(authExtensionCompleteRequestSchema.parse(input));
+        invocation.signal.throwIfAborted();
+        return authExtensionCompleteResponseSchema.parse(result);
+    },
+});
+//# sourceMappingURL=complete-authentication.model.js.map

package/dist/models/complete-authentication.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-authentication.model.js","sourceRoot":"","sources":["../../src/models/complete-authentication.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GAEpC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,sBAAsB,MAAM,yCAAyC,CAAC;AAE7E,eAAe,WAAW,CAAC;IACzB,QAAQ,EAAE,CAAC,sBAAsB,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,EAAE,KAAmC,EAAE,UAAU;QAC1E,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9F,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACnC,OAAO,mCAAmC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC,CAAC"}

package/dist/runtime/password-state-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-state-store.d.ts","sourceRoot":"","sources":["../../src/runtime/password-state-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC;IACxD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC5C,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAC1E,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,YAAY,CACV,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,qBAAqB,EAChC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACjF;AAED,qBAAa,qCAAsC,YAAW,6BAA6B;;IAG5E,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAGrF;IAEY,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExD;IAEY,YAAY,CACvB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,qBAAqB,EAChC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEY,eAAe,CAC1B,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,6BAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAQf;IAEY,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5F;CACF;AAED,qBAAa,kCAAmC,YAAW,6BAA6B;;IAGnE,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAzC,YAAoC,KAAK,EAAE,KAAK,EAE/C;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtF;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAqBrF;IAEY,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExD;IAEY,YAAY,CACvB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,qBAAqB,EAChC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC,CAWf;IAEY,eAAe,CAC1B,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,6BAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAWf;IAEY,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAM3F;IAED,OAAO,CAAC,GAAG;CAGZ"}
+{"version":3,"file":"password-state-store.d.ts","sourceRoot":"","sources":["../../src/runtime/password-state-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAA+B,KAAK,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE7G,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAA;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,6BAA6B,CAAA;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IAClD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAA;CAC7C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,6BAA6B;IAC5C,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAA;IACzE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChH,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChG,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAChF;AAED,qBAAa,qCAAsC,YAAW,6BAA6B;;IAG5E,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAGrF;IAEY,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExD;IAEY,YAAY,CACvB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,qBAAqB,EAChC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC,CAQf;IAEY,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5G;IAEY,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5F;CACF;AAED,qBAAa,kCAAmC,YAAW,6BAA6B;;IAGnE,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAzC,YAAoC,KAAK,EAAE,KAAK,EAE/C;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKtF;IAEY,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAuBrF;IAEY,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExD;IAEY,YAAY,CACvB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,qBAAqB,EAChC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC,CAiBf;IAEY,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB5G;IAEY,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAU3F;IAED,OAAO,CAAC,GAAG;CAGZ"}