openxiangda 1.0.149 → 1.0.151

package/packages/sdk/dist/runtime/react.d.mts

@@ -2170,6 +2170,12 @@ interface RuntimeRequestState<T> {
     loading: boolean;
     error: RuntimeRequestError | null;
 }
+type RuntimeAuthStatus = "unknown" | "authenticated" | "refreshing" | "unauthenticated";
+interface RuntimeAuthState {
+    status: RuntimeAuthStatus;
+    error?: RuntimeRequestError | null;
+    refreshedAt?: number;
+}
 interface RuntimeReloadOptions {
     accessToken?: string | null;
     accessTokenOptions?: RuntimeAccessTokenOptions;
@@ -2178,6 +2184,7 @@ interface RuntimeAccessTokenOptions {
     scope?: "default" | "public";
     path?: string | null;
     clearIfToken?: string;
+    expiresAt?: number;
 }
 interface OpenXiangdaProviderProps {
     appType?: string;
@@ -2199,6 +2206,7 @@ interface OpenXiangdaRuntimeStore extends RuntimeRequestState<RuntimeBootstrap>
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2213,6 +2221,7 @@ declare const useAppMenus: () => {
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2225,6 +2234,7 @@ declare const usePermission: () => {
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2275,6 +2285,13 @@ declare const useRuntimeAuth: () => {
     redirectToLogin: (options?: RuntimeRedirectLoginOptions) => Promise<string>;
     resolveLoginUrl: (options?: RuntimeResolveLoginOptions) => Promise<string>;
 };
+interface RuntimeAuthGuardProps extends RuntimeRedirectLoginOptions {
+    children: React__default.ReactNode;
+    fallback?: React__default.ReactNode;
+    disabled?: boolean;
+    excludedPaths?: string[];
+}
+declare const RuntimeAuthGuard: React__default.FC<RuntimeAuthGuardProps>;
 
 interface UsePublicAccessOptions extends PublicAccessSessionInput {
     appType?: string;
@@ -2297,4 +2314,4 @@ interface PublicAccessGateProps extends UsePublicAccessOptions {
 }
 declare const PublicAccessGate: React__default.FC<PublicAccessGateProps>;
 
-export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketResult, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };
+export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketResult, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };

package/packages/sdk/dist/runtime/react.d.ts

@@ -2170,6 +2170,12 @@ interface RuntimeRequestState<T> {
     loading: boolean;
     error: RuntimeRequestError | null;
 }
+type RuntimeAuthStatus = "unknown" | "authenticated" | "refreshing" | "unauthenticated";
+interface RuntimeAuthState {
+    status: RuntimeAuthStatus;
+    error?: RuntimeRequestError | null;
+    refreshedAt?: number;
+}
 interface RuntimeReloadOptions {
     accessToken?: string | null;
     accessTokenOptions?: RuntimeAccessTokenOptions;
@@ -2178,6 +2184,7 @@ interface RuntimeAccessTokenOptions {
     scope?: "default" | "public";
     path?: string | null;
     clearIfToken?: string;
+    expiresAt?: number;
 }
 interface OpenXiangdaProviderProps {
     appType?: string;
@@ -2199,6 +2206,7 @@ interface OpenXiangdaRuntimeStore extends RuntimeRequestState<RuntimeBootstrap>
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2213,6 +2221,7 @@ declare const useAppMenus: () => {
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2225,6 +2234,7 @@ declare const usePermission: () => {
     servicePrefix: string;
     fetchImpl: typeof fetch;
     baseFetchImpl: typeof fetch;
+    authState: RuntimeAuthState;
     getAuthHeaders: () => HeadersInit;
     reload: (options?: RuntimeReloadOptions) => Promise<void>;
     setAccessToken: (accessToken?: string | null, options?: RuntimeAccessTokenOptions) => void;
@@ -2275,6 +2285,13 @@ declare const useRuntimeAuth: () => {
     redirectToLogin: (options?: RuntimeRedirectLoginOptions) => Promise<string>;
     resolveLoginUrl: (options?: RuntimeResolveLoginOptions) => Promise<string>;
 };
+interface RuntimeAuthGuardProps extends RuntimeRedirectLoginOptions {
+    children: React__default.ReactNode;
+    fallback?: React__default.ReactNode;
+    disabled?: boolean;
+    excludedPaths?: string[];
+}
+declare const RuntimeAuthGuard: React__default.FC<RuntimeAuthGuardProps>;
 
 interface UsePublicAccessOptions extends PublicAccessSessionInput {
     appType?: string;
@@ -2297,4 +2314,4 @@ interface PublicAccessGateProps extends UsePublicAccessOptions {
 }
 declare const PublicAccessGate: React__default.FC<PublicAccessGateProps>;
 
-export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketResult, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };
+export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketResult, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };

package/packages/sdk/dist/runtime/react.mjs

@@ -4784,14 +4784,14 @@ var useAuth = (options = {}) => {
     () => createAuthClient({
       appType: options.appType || runtime.appType,
       servicePrefix: options.servicePrefix || runtime.servicePrefix,
-      fetchImpl: options.fetchImpl || runtime.fetchImpl
+      fetchImpl: options.fetchImpl || runtime.baseFetchImpl
     }),
     [
       options.appType,
       options.fetchImpl,
       options.servicePrefix,
       runtime.appType,
-      runtime.fetchImpl,
+      runtime.baseFetchImpl,
       runtime.servicePrefix
     ]
   );
@@ -5070,7 +5070,19 @@ var LoginPage = ({
   };
   async function handleSuccess(data) {
     await onSuccess?.(data);
-    await runtime.reload();
+    const accessToken = data.accessToken || data.token;
+    const accessTokenOptions = {
+      expiresAt: data.accessTokenExpiresAt
+    };
+    if (accessToken) {
+      runtime.setAccessToken(accessToken, accessTokenOptions);
+    }
+    await runtime.reload(
+      accessToken ? {
+        accessToken,
+        accessTokenOptions
+      } : void 0
+    );
     if (redirectOnSuccess && typeof window !== "undefined") {
       window.location.replace(
         redirectUrl || getCallbackUrl() || `/view/${auth.client.appType}`
@@ -5354,27 +5366,125 @@ var OpenXiangdaProvider = ({
     () => appType || resolveAppTypeFromLocation(),
     [appType]
   );
-  const [accessToken, setAccessTokenState] = useState9(null);
+  const [, setAccessTokenState] = useState9(null);
+  const [authState, setAuthState] = useState9({
+    status: "unknown",
+    error: null
+  });
   const accessTokenRef = useRef5(null);
-  const setAccessToken = useCallback8(
+  const refreshRequestRef = useRef5(null);
+  const applyAccessToken = useCallback8(
     (nextAccessToken, options = {}) => {
       if (!nextAccessToken && options.clearIfToken && accessTokenRef.current?.token !== options.clearIfToken) {
-        return;
+        return accessTokenRef.current;
       }
       const normalizedAccessToken = nextAccessToken || null;
       const nextState = normalizedAccessToken ? {
         token: normalizedAccessToken,
         scope: options.scope || "default",
-        path: options.path || null
+        path: options.path || null,
+        expiresAt: options.expiresAt
       } : null;
       accessTokenRef.current = nextState;
       setAccessTokenState(nextState);
+      return nextState;
     },
     []
   );
+  const setAccessToken = useCallback8(
+    (nextAccessToken, options = {}) => {
+      const previousState = accessTokenRef.current;
+      const nextState = applyAccessToken(nextAccessToken, options);
+      if (nextState) {
+        if (nextState.scope === "public") return;
+        setAuthState({
+          status: "authenticated",
+          error: null
+        });
+      } else if (previousState?.scope !== "public") {
+        setAuthState({ status: "unauthenticated", error: null });
+      }
+    },
+    [applyAccessToken]
+  );
+  const markUnauthenticated = useCallback8(
+    (error) => {
+      const runtimeError = normalizeRuntimeError(error);
+      applyAccessToken(null);
+      setAuthState({ status: "unauthenticated", error: runtimeError });
+    },
+    [applyAccessToken]
+  );
+  const refreshAccessToken = useCallback8(async () => {
+    if (!resolvedAppType) return null;
+    if (!refreshRequestRef.current) {
+      setAuthState((prev) => ({ ...prev, status: "refreshing", error: null }));
+      refreshRequestRef.current = (async () => {
+        const response = await resolvedFetch(
+          buildServiceUrl2(
+            servicePrefix,
+            `/openxiangda-api/v1/apps/${encodeURIComponent(
+              resolvedAppType
+            )}/auth/refresh`
+          ),
+          {
+            method: "POST",
+            credentials: "include",
+            headers: {
+              accept: "application/json",
+              "content-type": "application/json"
+            },
+            body: "{}"
+          }
+        );
+        const payload = await readJsonPayload(response);
+        if (isRuntimeEnvelopeFailure(response, payload)) {
+          throw createRuntimeHttpError(
+            response,
+            payload,
+            payload?.message || `Token refresh failed: ${response.status}`
+          );
+        }
+        const data = unwrapRuntimePayload(payload);
+        const nextAccessToken = getRecordString(data, "accessToken") || getRecordString(data, "token");
+        if (!nextAccessToken) {
+          throw createRuntimeError({
+            type: "unauthenticated",
+            status: response.status,
+            code: getRecordValue2(payload, "code"),
+            message: "Token refresh response missing accessToken",
+            payload
+          });
+        }
+        const nextState = applyAccessToken(nextAccessToken, {
+          expiresAt: getRecordNumber(data, "accessTokenExpiresAt")
+        });
+        setAuthState({
+          status: "authenticated",
+          error: null,
+          refreshedAt: Date.now()
+        });
+        return nextState;
+      })().catch((error) => {
+        const runtimeError = normalizeRuntimeError(error);
+        applyAccessToken(null);
+        setAuthState({ status: "unauthenticated", error: runtimeError });
+        throw runtimeError;
+      }).finally(() => {
+        refreshRequestRef.current = null;
+      });
+    }
+    return refreshRequestRef.current;
+  }, [applyAccessToken, resolvedAppType, resolvedFetch, servicePrefix]);
   const authorizedFetch = useMemo11(
-    () => createAuthorizedFetch(resolvedFetch, accessToken),
-    [accessToken, resolvedFetch]
+    () => createAuthorizedFetch({
+      appType: resolvedAppType,
+      baseFetch: resolvedFetch,
+      accessTokenRef,
+      markUnauthenticated,
+      refreshAccessToken
+    }),
+    [markUnauthenticated, refreshAccessToken, resolvedAppType, resolvedFetch]
   );
   const getAuthHeaders = useCallback8(() => {
     const state2 = accessTokenRef.current;
@@ -5400,13 +5510,13 @@ var OpenXiangdaProvider = ({
       return;
     }
     setState((prev) => ({ ...prev, loading: true, error: null }));
-    const requestFetch = options.accessToken !== void 0 ? createAuthorizedFetch(
+    const requestFetch = options.accessToken !== void 0 ? createAccessTokenFetch(
       resolvedFetch,
       createAccessTokenState(
         options.accessToken || null,
         options.accessTokenOptions
       )
-    ) : createAuthorizedFetch(resolvedFetch, accessTokenRef.current);
+    ) : authorizedFetch;
     try {
       const response = await requestFetch(
         buildServiceUrl2(
@@ -5428,19 +5538,29 @@ var OpenXiangdaProvider = ({
           payload?.message || `Runtime bootstrap failed: ${response.status}`
         );
       }
+      const nextData = payload?.data || null;
       setState({
-        data: payload?.data || null,
+        data: nextData,
         loading: false,
         error: null
       });
+      if (isAuthenticatedBootstrap(nextData)) {
+        setAuthState(
+          (prev) => prev.status === "authenticated" ? prev : { status: "authenticated", error: null }
+        );
+      }
     } catch (error) {
+      const runtimeError = normalizeRuntimeError(error);
       setState({
         data: null,
         loading: false,
-        error: normalizeRuntimeError(error)
+        error: runtimeError
       });
+      if (runtimeError.type === "unauthenticated") {
+        setAuthState({ status: "unauthenticated", error: runtimeError });
+      }
     }
-  }, [resolvedAppType, resolvedFetch, servicePrefix]);
+  }, [authorizedFetch, resolvedAppType, resolvedFetch, servicePrefix]);
   useEffect9(() => {
     void reload();
   }, [reload]);
@@ -5451,6 +5571,7 @@ var OpenXiangdaProvider = ({
       servicePrefix,
       fetchImpl: authorizedFetch,
       baseFetchImpl: resolvedFetch,
+      authState,
       getAuthHeaders,
       reload,
       setAccessToken
@@ -5462,7 +5583,8 @@ var OpenXiangdaProvider = ({
       resolvedAppType,
       resolvedFetch,
       servicePrefix,
-      state
+      state,
+      authState
     ]
   );
   return /* @__PURE__ */ jsx10(OpenXiangdaRuntimeContext.Provider, { value, children });
@@ -5729,7 +5851,7 @@ var useRuntimeAuth = () => {
           buildServiceUrl2(runtime.servicePrefix, "/api/sso/status"),
           { domain }
         );
-        const statusResponse = await runtime.fetchImpl(statusUrl, {
+        const statusResponse = await runtime.baseFetchImpl(statusUrl, {
           credentials: "include",
           headers: { accept: "application/json" }
         });
@@ -5740,7 +5862,7 @@ var useRuntimeAuth = () => {
           enabled && (sso.forceLogin ?? sso.autoRedirect ?? true)
         );
         if (shouldUseSso) {
-          const loginUrlResponse = await runtime.fetchImpl(
+          const loginUrlResponse = await runtime.baseFetchImpl(
             withQuery(buildServiceUrl2(runtime.servicePrefix, "/api/sso/login-url"), {
               domain,
               redirectUri,
@@ -5764,7 +5886,7 @@ var useRuntimeAuth = () => {
       }
       return attachCallback("/platform/login", redirectUri);
     },
-    [runtime.data?.app, runtime.fetchImpl, runtime.servicePrefix]
+    [runtime.baseFetchImpl, runtime.data?.app, runtime.servicePrefix]
   );
   const redirectToLogin = useCallback8(
     async (options = {}) => {
@@ -5781,7 +5903,7 @@ var useRuntimeAuth = () => {
     [resolveLoginUrl2]
   );
   const logout = useCallback8(async () => {
-    const response = await runtime.fetchImpl(
+    const response = await runtime.baseFetchImpl(
       buildServiceUrl2(runtime.servicePrefix, "/api/auth/logout"),
       {
         method: "POST",
@@ -5797,8 +5919,9 @@ var useRuntimeAuth = () => {
         payload?.message || `Logout failed: ${response.status}`
       );
     }
+    runtime.setAccessToken(null);
     return payload;
-  }, [runtime.fetchImpl, runtime.servicePrefix]);
+  }, [runtime.baseFetchImpl, runtime.servicePrefix, runtime.setAccessToken]);
   const logoutAndRedirect = useCallback8(
     async (options = {}) => {
       try {
@@ -5810,19 +5933,93 @@ var useRuntimeAuth = () => {
     },
     [logout, redirectToLogin]
   );
-  return {
-    logout,
-    logoutAndRedirect,
-    redirectToLogin,
-    resolveLoginUrl: resolveLoginUrl2
-  };
+  return useMemo11(
+    () => ({
+      logout,
+      logoutAndRedirect,
+      redirectToLogin,
+      resolveLoginUrl: resolveLoginUrl2
+    }),
+    [logout, logoutAndRedirect, redirectToLogin, resolveLoginUrl2]
+  );
+};
+var RuntimeAuthGuard = ({
+  children,
+  fallback = null,
+  disabled = false,
+  excludedPaths = [],
+  ...redirectOptions
+}) => {
+  const runtime = useOpenXiangda();
+  const auth = useRuntimeAuth();
+  const redirectedRef = useRef5(false);
+  const currentPath = getCurrentPathname();
+  const excluded = isRuntimeAuthGuardExcluded(
+    currentPath,
+    runtime.appType,
+    excludedPaths
+  );
+  const shouldRedirect = !disabled && !excluded && !runtime.loading && (runtime.authState.status === "unauthenticated" || runtime.error?.type === "unauthenticated");
+  useEffect9(() => {
+    if (!shouldRedirect || redirectedRef.current) return;
+    redirectedRef.current = true;
+    void auth.redirectToLogin({
+      ...redirectOptions,
+      redirectUri: redirectOptions.redirectUri || getCurrentHref4()
+    }).catch(() => {
+      redirectedRef.current = false;
+    });
+  }, [
+    auth,
+    redirectOptions.domain,
+    redirectOptions.loginUrl,
+    redirectOptions.redirectUri,
+    redirectOptions.replace,
+    shouldRedirect
+  ]);
+  if (excluded) return /* @__PURE__ */ jsx10(Fragment5, { children });
+  if (shouldRedirect) return /* @__PURE__ */ jsx10(Fragment5, { children: fallback });
+  return /* @__PURE__ */ jsx10(Fragment5, { children });
 };
 var buildServiceUrl2 = (servicePrefix, path) => {
   const prefix = servicePrefix.endsWith("/") ? servicePrefix.slice(0, -1) : servicePrefix;
   const suffix = path.startsWith("/") ? path : `/${path}`;
   return `${prefix}${suffix}`;
 };
-var createAuthorizedFetch = (baseFetch, accessToken) => {
+var createAuthorizedFetch = ({
+  appType,
+  baseFetch,
+  accessTokenRef,
+  refreshAccessToken,
+  markUnauthenticated
+}) => (async (input, init = {}) => {
+  const currentTokenState = accessTokenRef.current;
+  const response = await createAccessTokenFetch(
+    baseFetch,
+    currentTokenState
+  )(input, init);
+  if (!shouldAttemptAuthRefresh({
+    appType,
+    input,
+    init,
+    tokenState: currentTokenState
+  })) {
+    return response;
+  }
+  if (!await isUnauthenticatedResponse(response)) return response;
+  try {
+    const refreshedTokenState = await refreshAccessToken();
+    if (!refreshedTokenState) return response;
+    return await createAccessTokenFetch(
+      baseFetch,
+      refreshedTokenState
+    )(input, init);
+  } catch (error) {
+    markUnauthenticated(error);
+    return response;
+  }
+});
+var createAccessTokenFetch = (baseFetch, accessToken) => {
   if (!accessToken) return baseFetch;
   return ((input, init = {}) => {
     const token = resolveAccessTokenForCurrentRoute(accessToken);
@@ -5840,8 +6037,53 @@ var createAuthorizedFetch = (baseFetch, accessToken) => {
 var createAccessTokenState = (accessToken, options = {}) => accessToken ? {
   token: accessToken,
   scope: options.scope || "default",
-  path: options.path || null
+  path: options.path || null,
+  expiresAt: options.expiresAt
 } : null;
+var shouldAttemptAuthRefresh = ({
+  appType,
+  input,
+  init,
+  tokenState
+}) => {
+  if (!appType) return false;
+  if (tokenState?.scope === "public") return false;
+  if (isPublicRoutePath(normalizeRoutePath(getCurrentPathname()))) return false;
+  if (hasAuthorizationHeader(init?.headers)) return false;
+  const pathname = getFetchInputPathname(input);
+  if (!pathname) return false;
+  if (/\/openxiangda-api\/v1\/apps\/[^/]+\/auth(?:\/|$)/.test(pathname)) {
+    return false;
+  }
+  if (/\/openxiangda-api\/v1\/apps\/[^/]+\/public\/session(?:\/|$)/.test(pathname)) {
+    return false;
+  }
+  if (/\/openxiangda-api\/v1\/auth(?:\/|$)/.test(pathname)) return false;
+  if (/\/api\/auth\/logout(?:\/|$)/.test(pathname)) return false;
+  if (/\/api\/sso(?:\/|$)/.test(pathname)) return false;
+  return true;
+};
+var isUnauthenticatedResponse = async (response) => {
+  if (response.status === 401) return true;
+  const payload = await readJsonPayload(response.clone());
+  const code = getRecordValue2(payload, "code");
+  return classifyRuntimeError(response.status, code) === "unauthenticated";
+};
+var hasAuthorizationHeader = (headers) => {
+  if (!headers) return false;
+  const normalized = new Headers(headers);
+  return normalized.has("authorization");
+};
+var getFetchInputPathname = (input) => {
+  const text = typeof input === "string" ? input : input instanceof URL ? input.toString() : typeof Request !== "undefined" && input instanceof Request ? input.url : String(input || "");
+  if (!text) return "";
+  try {
+    const base = typeof window !== "undefined" ? window.location.origin : "http://localhost";
+    return new URL(text, base).pathname;
+  } catch {
+    return text.split(/[?#]/, 1)[0] || "";
+  }
+};
 var resolveAccessTokenForCurrentRoute = (accessToken) => {
   if (accessToken.scope !== "public") return accessToken.token;
   const scopedPath = normalizeRoutePath(accessToken.path);
@@ -6026,6 +6268,31 @@ var getRecordString = (value, key) => {
   const result = getRecordValue2(value, key);
   return typeof result === "string" ? result : void 0;
 };
+var getRecordNumber = (value, key) => {
+  const result = getRecordValue2(value, key);
+  const numberValue = Number(result);
+  return Number.isFinite(numberValue) ? numberValue : void 0;
+};
+var unwrapRuntimePayload = (payload) => {
+  if (!payload || typeof payload !== "object") return payload;
+  const record = payload;
+  return "data" in record ? record.data : payload;
+};
+var isAuthenticatedBootstrap = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const user = toRuntimeRecord(getRecordValue2(value, "user"));
+  if (!getRecordValue2(user, "id") && !getRecordValue2(user, "username")) {
+    return false;
+  }
+  return !getRecordValue2(user, "publicAccess");
+};
+var isRuntimeAuthGuardExcluded = (path, appType, excludedPaths) => {
+  const normalizedPath = normalizeRoutePath(path);
+  if (isPublicRoutePath(normalizedPath)) return true;
+  const loginPath = normalizeRoutePath(`/view/${encodeURIComponent(appType)}/login`);
+  if (appType && normalizedPath === loginPath) return true;
+  return excludedPaths.map((item) => normalizeRoutePath(item)).some((item) => item && normalizedPath === item);
+};
 var resolveAppTypeFromLocation = () => {
   if (typeof window === "undefined") return "";
   const segments = window.location.pathname.split("/").filter(Boolean);
@@ -6287,6 +6554,7 @@ export {
   ProcessTimeline,
   PublicAccessClientError,
   PublicAccessGate,
+  RuntimeAuthGuard,
   createAuthClient,
   createPageSdk,
   createPublicAccessClient,