@adonis-agora/authkit-react 0.25.2 → 1.0.0-rc.0

package/README.md

@@ -17,8 +17,8 @@ pnpm add @adonis-agora/authkit-react
 
 ## 1. No host AdonisJS: compartilhar a prop `authkit`
 
-A shared-prop tem o formato `AuthSharedProps`. Use `auth.getUser()` /
-`auth.identity` do `@adonis-agora/authkit-client` para preenchê-la — tipicamente
+A shared-prop tem o formato `AuthSharedProps`. Use `authkit.getUser()` /
+`authkit.identity` do `@adonis-agora/authkit-client` para preenchê-la — tipicamente
 num middleware ou no `config/inertia.ts` (`sharedData`):
 
 ```ts
@@ -28,11 +28,11 @@ import { defineConfig } from '@adonisjs/inertia'
 export default defineConfig({
   sharedData: {
     authkit: async (ctx) => {
-      const auth = ctx.authkit // sua instância do Authenticator
-      const user = await auth.getUser() // mesmo shape de identityToUser/resolveUser
+      const authkit = ctx.authkit // sua instância do Authenticator
+      const user = await authkit.getUser() // mesmo shape de identityToUser/resolveUser
       return {
         user: user ?? null,
-        globalRoles: auth.identity?.globalRoles ?? [],
+        globalRoles: authkit.identity?.globalRoles ?? [],
       }
     },
   },
@@ -98,29 +98,39 @@ import { AuthProvider } from '@adonis-agora/authkit-react'
 
 ## 5. Config + componentes prontos
 
-Envolva a app com `<AuthkitProvider>` para configurar URLs/endpoints e use os
-hooks headless e componentes prontos:
+Envolva a app com `<AuthkitProvider>` (URLs, CSRF, modo de IdP). Os componentes de
+conta (`UserProfile`, `AuthorizedApps`, `OrganizationSwitcher`, `OrganizationProfile`)
+buscam dados pela Account API, então também precisam de `QueryClientProvider` +
+`AuthkitClientProvider`:
 
 ```tsx
 import '@adonis-agora/authkit-react/styles.css'
+import { QueryClientProvider } from '@tanstack/react-query'
 import {
+  AuthkitClientProvider,
   AuthkitProvider,
-  useSignIn, useSignOut, useUser, useProfile, useSessions, useAuthorizedApps,
-  SignInButton, SignOutButton, UserButton, UserProfile, AuthorizedApps,
+  createAuthkitQueryClient,
+  AuthorizedApps,
+  UserButton,
+  UserProfile,
 } from '@adonis-agora/authkit-react'
 
-<AuthkitProvider config={{ csrfToken: page.props.csrfToken }}>
-  <UserButton />
-  <UserProfile />
-  <AuthorizedApps />
-</AuthkitProvider>
+const queryClient = createAuthkitQueryClient()
+
+<QueryClientProvider client={queryClient}>
+  <AuthkitClientProvider>
+    <AuthkitProvider config={{ csrfToken: page.props.csrfToken }}>
+      <UserButton />
+      <UserProfile />
+      <AuthorizedApps />
+    </AuthkitProvider>
+  </AuthkitClientProvider>
+</QueryClientProvider>
 ```
 
-Defaults dos endpoints apontam para as rotas reais do host-kit
-(`/auth/login`, `/account/logout`, `/account/security`, `/account/security/profile`,
-`/account/apps`, …). Numa topologia de *client app*, aponte-os para rotas locais que
-redirecionam para o IdP. Temável via CSS vars `--authkit-*`. Veja a
-[doc de React](https://...) para detalhes.
+Para telas próprias, use as query options com `useQuery`/`useMutation`
+(`useMeQueryOptions`, `useAccountSessionsQueryOptions`, `useAppsQueryOptions`,
+`useAccountOrgsQueryOptions`, …). Temável via CSS vars `--authkit-*`.
 
 ## Helpers puros
 

package/build/index.d.ts

@@ -4,7 +4,7 @@ export type { AuthkitClient, AuthkitClientOptions, } from './src/client/client.j
 export { AuthkitClientError, createAuthkitClient, } from './src/client/client.js';
 export type { AuthkitClientProviderProps } from './src/client/context.js';
 export { AuthkitClientProvider, createAuthkitQueryClient, useAuthkitClient, } from './src/client/context.js';
-export type { AcceptOrgInvitationResult, AccountAppEntry, AccountAppsResult, AccountCapabilities, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgEntry, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionEntry, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminGrantEntry, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOrgMember, AdminOverview, AdminSessionEntry, AdminUser, AdminUserListResult, ApiErrorBody, AuditEventEntry, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DailyPoint, DeactivateOrgResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, ListMeta, ManagedKeyInfo, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PasskeySummaryEntry, PatEntry, PersonalAgentConnection, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentEntry, PersonalAgentListStatus, PersonalAgentProtocol, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult, } from './src/client/types.js';
+export type { AcceptOrgInvitationResult, AccountAgentGrant, AccountAgentsResult, AccountAppEntry, AccountAppsResult, AccountCapabilities, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgEntry, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionEntry, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminGrantEntry, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOrgMember, AdminOverview, AdminSessionEntry, AdminUser, AdminUserListResult, ApiErrorBody, AuditEventEntry, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DailyPoint, DeactivateOrgResult, DeletedResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, ListMeta, ManagedKeyInfo, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PasskeySummaryEntry, PatEntry, PersonalAgentConnection, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentEntry, PersonalAgentListStatus, PersonalAgentProtocol, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, ResetPasswordResult, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult, } from './src/client/types.js';
 export type { AuthenticatedProps, GuestProps, } from './src/components/authenticated.js';
 export { Authenticated, Guest } from './src/components/authenticated.js';
 export type { AuthorizedAppsProps } from './src/components/authorized_apps.js';
@@ -17,6 +17,8 @@ export type { InteractionFormProps } from './src/components/interaction_form.js'
 export { InteractionForm } from './src/components/interaction_form.js';
 export type { KeyRotationProps } from './src/components/key_rotation.js';
 export { KeyRotation } from './src/components/key_rotation.js';
+export type { LastUsedBadgeProps } from './src/components/last_used_badge.js';
+export { LastUsedBadge } from './src/components/last_used_badge.js';
 export type { MagicLinkButtonProps } from './src/components/magic_link_button.js';
 export { MagicLinkButton } from './src/components/magic_link_button.js';
 export type { OAuthButtonProps } from './src/components/oauth_button.js';
@@ -39,16 +41,8 @@ export type { UserProfileProps } from './src/components/user_profile.js';
 export { UserProfile } from './src/components/user_profile.js';
 export type { AuthkitConfig, AuthkitEndpoints, AuthkitIdpMode, ResolvedAuthkitConfig, } from './src/config.js';
 export { AuthkitConfigContext, buildAuthUrl, DEFAULT_CONFIG, resolveConfig, useAuthkitConfig, } from './src/config.js';
-export type { AuthorizedApp, UseAuthorizedAppsResult, } from './src/hooks/use_authorized_apps.js';
-export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
 export type { UseCanResult } from './src/hooks/use_can.js';
 export { checkCan, invalidateCanCache, useCan } from './src/hooks/use_can.js';
-export type { OrgInvitationEntry, UseOrgInvitationsResult, } from './src/hooks/use_org_invitations.js';
-export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
-export type { ActiveOrgDetail, OrgMemberEntry, UseOrganizationResult, } from './src/hooks/use_organization.js';
-export { useOrganization } from './src/hooks/use_organization.js';
-export type { OrgEntry, UseOrganizationsResult, } from './src/hooks/use_organizations.js';
-export { useOrganizations } from './src/hooks/use_organizations.js';
 export type { UsePasskeyAssertionOptions, UsePasskeyAssertionResult, } from './src/hooks/use_passkey_assertion.js';
 export { usePasskeyAssertion } from './src/hooks/use_passkey_assertion.js';
 export type { UsePasskeyAutofillOptions } from './src/hooks/use_passkey_autofill.js';
@@ -59,20 +53,15 @@ export type { UsePasskeyRegistrationOptions, UsePasskeyRegistrationResult, } fro
 export { usePasskeyRegistration } from './src/hooks/use_passkey_registration.js';
 export type { PasswordScorer, PasswordStrengthResult, PasswordStrengthScore, UsePasswordStrengthOptions, } from './src/hooks/use_password_strength.js';
 export { heuristicScorer, usePasswordStrength, } from './src/hooks/use_password_strength.js';
-export type { ProfileUpdate, UseProfileResult, } from './src/hooks/use_profile.js';
-export { useProfile } from './src/hooks/use_profile.js';
-export type { ResourceState } from './src/hooks/use_resource.js';
-export { jsonRequest, useResource } from './src/hooks/use_resource.js';
-export type { AuthSession, UseSessionsResult, } from './src/hooks/use_sessions.js';
-export { useSessions } from './src/hooks/use_sessions.js';
+export { jsonRequest } from './src/hooks/use_resource.js';
 export type { SignInOptions } from './src/hooks/use_sign_in.js';
 export { useSignIn } from './src/hooks/use_sign_in.js';
 export type { SignOutOptions } from './src/hooks/use_sign_out.js';
 export { useSignOut } from './src/hooks/use_sign_out.js';
-export type { UseSwitchOrganizationResult } from './src/hooks/use_switch_organization.js';
-export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
 export type { UseUserResult } from './src/hooks/use_user.js';
 export { useUser } from './src/hooks/use_user.js';
+export type { LastLoginMethod } from './src/interaction/last_used.js';
+export { isLastUsedLoginMethod } from './src/interaction/last_used.js';
 export type { InteractionPostStep, InteractionUrls, } from './src/interaction/urls.js';
 export { interactionUrls, OTP_CODE_FIELD, oauthRedirectUrl } from './src/interaction/urls.js';
 export type { AuthenticatePasskeyOptions, PasskeyCeremonyDeps, PasskeyRegistrationDeps, RegisterPasskeyOptions, StartAuthenticationFn, StartRegistrationFn, SubmitPasskeyVerificationOptions, } from './src/passkey/authenticate.js';
@@ -85,7 +74,7 @@ export type { RunPasskeyAssertionDeps, RunPasskeyFlowOptions, RunPasskeyRegistra
 export { runPasskeyAssertion, runPasskeyRegistration } from './src/passkey/sudo.js';
 export type { AuthProviderProps } from './src/provider.js';
 export { AuthContext, AuthProvider } from './src/provider.js';
-export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
+export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountAgentsQueryOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAccountAgentMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
 export { useAddOrgMemberMutationOptions, useAuditQueryOptions, useClientQueryOptions, useClientsQueryOptions, useCreateClientMutationOptions, useCreateOrgInvitationMutationOptions, useCreateOrgMutationOptions, useCreateRoleMutationOptions, useCreateUserMutationOptions, useDeleteClientMutationOptions, useDeleteOrgMutationOptions, useDeleteRoleMutationOptions, useDeleteUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useOrgQueryOptions, useOrgsQueryOptions, useOverviewQueryOptions, usePersonalAgentConnectionsQueryOptions, usePersonalAgentsQueryOptions, useRegenerateClientSecretMutationOptions, useRemoveOrgMemberMutationOptions, useRemovePersonalAgentEntryMutationOptions, useRemoveSettingMutationOptions, useResetPasswordMutationOptions, useRevokeAllSessionsMutationOptions, useRevokeOrgInvitationMutationOptions, useRevokePersonalAgentConnectionMutationOptions, useRevokeUserSessionsMutationOptions, useRolesQueryOptions, useRotateKeysMutationOptions, useSessionsQueryOptions, useSetPersonalAgentStatusMutationOptions, useSetSettingMutationOptions, useSettingsQueryOptions, useUpdateClientMutationOptions, useUpdateOrgMemberRoleMutationOptions, useUpdateOrgMutationOptions, useUpdateRoleMutationOptions, useUpdateUserMutationOptions, useUserQueryOptions, useUserSessionsQueryOptions, useUsersQueryOptions, } from './src/queries/admin/index.js';
 export { authkitKeys } from './src/queries/keys.js';
 export { hasAllGlobalRoles, hasAnyGlobalRole, hasGlobalRole, } from './src/roles.js';

package/build/index.js

@@ -7,6 +7,7 @@ export { Avatar } from './src/components/avatar.js';
 export { CanPermission } from './src/components/can_permission.js';
 export { InteractionForm } from './src/components/interaction_form.js';
 export { KeyRotation } from './src/components/key_rotation.js';
+export { LastUsedBadge } from './src/components/last_used_badge.js';
 export { MagicLinkButton } from './src/components/magic_link_button.js';
 export { OAuthButton } from './src/components/oauth_button.js';
 export { OrganizationProfile } from './src/components/organization_profile.js';
@@ -18,30 +19,24 @@ export { SignOutButton } from './src/components/sign_out_button.js';
 export { UserButton } from './src/components/user_button.js';
 export { UserProfile } from './src/components/user_profile.js';
 export { AuthkitConfigContext, buildAuthUrl, DEFAULT_CONFIG, resolveConfig, useAuthkitConfig, } from './src/config.js';
-export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
 export { checkCan, invalidateCanCache, useCan } from './src/hooks/use_can.js';
-export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
-export { useOrganization } from './src/hooks/use_organization.js';
-export { useOrganizations } from './src/hooks/use_organizations.js';
 export { usePasskeyAssertion } from './src/hooks/use_passkey_assertion.js';
 export { usePasskeyAutofill } from './src/hooks/use_passkey_autofill.js';
 export { usePasskeyLogin } from './src/hooks/use_passkey_login.js';
 export { usePasskeyRegistration } from './src/hooks/use_passkey_registration.js';
 export { heuristicScorer, usePasswordStrength, } from './src/hooks/use_password_strength.js';
-export { useProfile } from './src/hooks/use_profile.js';
-export { jsonRequest, useResource } from './src/hooks/use_resource.js';
-export { useSessions } from './src/hooks/use_sessions.js';
+export { jsonRequest } from './src/hooks/use_resource.js';
 export { useSignIn } from './src/hooks/use_sign_in.js';
 export { useSignOut } from './src/hooks/use_sign_out.js';
-export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
 export { useUser } from './src/hooks/use_user.js';
+export { isLastUsedLoginMethod } from './src/interaction/last_used.js';
 export { interactionUrls, OTP_CODE_FIELD, oauthRedirectUrl } from './src/interaction/urls.js';
 export { authenticatePasskey, loadStartAuthentication, loadStartRegistration, registerPasskey, submitPasskeyVerification, } from './src/passkey/authenticate.js';
 export { submitClassicForm } from './src/passkey/classic_form.js';
 export { registerPasskeyJson } from './src/passkey/json_registration.js';
 export { runPasskeyAssertion, runPasskeyRegistration } from './src/passkey/sudo.js';
 export { AuthContext, AuthProvider } from './src/provider.js';
-export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
+export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountAgentsQueryOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAccountAgentMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
 export { useAddOrgMemberMutationOptions, useAuditQueryOptions, useClientQueryOptions, useClientsQueryOptions, useCreateClientMutationOptions, useCreateOrgInvitationMutationOptions, useCreateOrgMutationOptions, useCreateRoleMutationOptions, useCreateUserMutationOptions, useDeleteClientMutationOptions, useDeleteOrgMutationOptions, useDeleteRoleMutationOptions, useDeleteUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useOrgQueryOptions, useOrgsQueryOptions, useOverviewQueryOptions, usePersonalAgentConnectionsQueryOptions, usePersonalAgentsQueryOptions, useRegenerateClientSecretMutationOptions, useRemoveOrgMemberMutationOptions, useRemovePersonalAgentEntryMutationOptions, useRemoveSettingMutationOptions, useResetPasswordMutationOptions, useRevokeAllSessionsMutationOptions, useRevokeOrgInvitationMutationOptions, useRevokePersonalAgentConnectionMutationOptions, useRevokeUserSessionsMutationOptions, useRolesQueryOptions, useRotateKeysMutationOptions, useSessionsQueryOptions, useSetPersonalAgentStatusMutationOptions, useSetSettingMutationOptions, useSettingsQueryOptions, useUpdateClientMutationOptions, useUpdateOrgMemberRoleMutationOptions, useUpdateOrgMutationOptions, useUpdateRoleMutationOptions, useUpdateUserMutationOptions, useUserQueryOptions, useUserSessionsQueryOptions, useUsersQueryOptions, } from './src/queries/admin/index.js';
 export { authkitKeys } from './src/queries/keys.js';
 export { hasAllGlobalRoles, hasAnyGlobalRole, hasGlobalRole, } from './src/roles.js';

package/build/src/client/client.d.ts

@@ -1,4 +1,4 @@
-import type { AcceptOrgInvitationResult, AccountAppsResult, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOverview, AdminUser, AdminUserListResult, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DeactivateOrgResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult } from './types.js';
+import type { AcceptOrgInvitationResult, AccountAgentsResult, AccountAppsResult, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOverview, AdminUser, AdminUserListResult, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DeactivateOrgResult, DeletedResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, ResetPasswordResult, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult } from './types.js';
 export declare class AuthkitClientError extends Error {
     readonly status: number;
     readonly code?: string | undefined;
@@ -39,22 +39,10 @@ declare class AuthkitClient {
                 invited?: boolean;
             }>;
             readonly update: (id: string, data: UpdateUserInput) => Promise<AdminUser>;
-            readonly disable: (id: string) => Promise<{
-                id: string;
-                disabled: true;
-            }>;
-            readonly enable: (id: string) => Promise<{
-                id: string;
-                disabled: false;
-            }>;
-            readonly resetPassword: (id: string) => Promise<{
-                id: string;
-                sent: boolean;
-            }>;
-            readonly remove: (id: string) => Promise<{
-                id: string;
-                deleted: boolean;
-            }>;
+            readonly disable: (id: string) => Promise<AdminUser>;
+            readonly enable: (id: string) => Promise<AdminUser>;
+            readonly resetPassword: (id: string) => Promise<ResetPasswordResult>;
+            readonly remove: (id: string) => Promise<DeletedResult>;
             readonly getSessions: (id: string) => Promise<UserSessionsResult>;
             readonly revokeSessions: (id: string) => Promise<RevokeSessionsResult>;
         };
@@ -67,10 +55,7 @@ declare class AuthkitClient {
             readonly get: (id: string) => Promise<AdminClient>;
             readonly create: (data?: CreateClientInput) => Promise<CreatedClientResult>;
             readonly update: (id: string, data?: UpdateClientInput) => Promise<AdminClient>;
-            readonly remove: (id: string) => Promise<{
-                clientId: string;
-                deleted: boolean;
-            }>;
+            readonly remove: (id: string) => Promise<DeletedResult>;
             readonly regenerateSecret: (id: string) => Promise<RegenerateSecretResult>;
         };
         readonly roles: {
@@ -162,6 +147,12 @@ declare class AuthkitClient {
             readonly list: () => Promise<AccountAppsResult>;
             readonly revoke: (clientId: string) => Promise<RevokeAppResult>;
         };
+        readonly agents: {
+            readonly list: () => Promise<AccountAgentsResult>;
+            readonly revoke: (grantId: string) => Promise<{
+                ok: true;
+            }>;
+        };
         readonly mfa: (() => Promise<AccountMfaStatus>) & {
             enroll: () => Promise<MfaEnrollResult>;
             confirm: (code: string) => Promise<MfaConfirmResult>;

package/build/src/client/client.js

@@ -13,16 +13,6 @@ export class AuthkitClientError extends Error {
     isUnauthorized;
 }
 const MUTATING = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
-function resolveWindow() {
-    try {
-        if (typeof window === 'undefined')
-            return null;
-        return window.__AUTHKIT__ ?? null;
-    }
-    catch {
-        return null;
-    }
-}
 function toQueryString(params) {
     const parts = [];
     for (const [k, v] of Object.entries(params)) {
@@ -38,10 +28,9 @@ class AuthkitClient {
     _csrfToken;
     _fetch;
     constructor(opts = {}) {
-        const win = resolveWindow();
-        this._baseUrl = opts.baseUrl ?? win?.endpoints.api;
+        this._baseUrl = opts.baseUrl;
         this._accountBaseUrl = opts.accountBaseUrl ?? '/account/api';
-        this._csrfToken = opts.csrfToken ?? win?.csrfToken;
+        this._csrfToken = opts.csrfToken;
         this._fetch = opts.fetch ?? globalThis.fetch.bind(globalThis);
     }
     async request(method, url, body, extraHeaders) {
@@ -101,8 +90,7 @@ class AuthkitClient {
     }
     b(path) {
         if (!this._baseUrl) {
-            throw new Error('[AuthkitClient] admin base URL ausente: passe `baseUrl` em createAuthkitClient({ baseUrl }) ' +
-                'ou use o client onde window.__AUTHKIT__ está injetado (console admin). ' +
+            throw new Error('[AuthkitClient] admin base URL ausente: passe `baseUrl` em createAuthkitClient({ baseUrl }). ' +
                 'Telas que só usam client.account.* não precisam de baseUrl.');
         }
         return `${this._baseUrl}${path}`;
@@ -213,6 +201,10 @@ class AuthkitClient {
             list: () => this.get(this.a('/apps')),
             revoke: (clientId) => this.delete(this.a(`/apps/${encodeURIComponent(clientId)}`)),
         },
+        agents: {
+            list: () => this.get(this.a('/agents')),
+            revoke: (grantId) => this.delete(this.a(`/agents/${encodeURIComponent(grantId)}`)),
+        },
         mfa: Object.assign(() => this.get(this.a('/mfa')), {
             enroll: () => this.post(this.a('/mfa/totp/enroll')),
             confirm: (code) => this.post(this.a('/mfa/totp/confirm'), { code }),

package/build/src/client/types.d.ts

@@ -25,14 +25,12 @@ export interface AdminUserListResult {
 }
 export interface CreateUserInput {
     email: string;
-    name?: string | null;
-    password?: string | null;
+    name?: string;
+    password?: string;
     invite?: boolean;
 }
 export interface UpdateUserInput {
     globalRoles?: string[];
-    name?: string | null;
-    avatarUrl?: string | null;
 }
 export interface AdminSessionEntry {
     id: string;
@@ -71,13 +69,15 @@ export interface AdminSessionListResult {
 export interface AdminClient {
     clientId: string;
     confidential: boolean;
-    grants: string[];
+    grantTypes: string[];
     redirectUris: string[];
     postLogoutRedirectUris: string[];
     tokenEndpointAuthMethod: string;
     applicationType?: 'web' | 'native';
     backchannelLogoutUri: string | null;
     backchannelLogoutSessionRequired: boolean;
+    clientName: string | null;
+    logoUri: string | null;
 }
 export interface AdminClientListResult {
     data: AdminClient[];
@@ -100,8 +100,14 @@ export interface CreateClientInput {
     applicationType?: 'web' | 'native';
     backchannelLogoutUri?: string;
     backchannelLogoutSessionRequired?: boolean;
-}
-export type UpdateClientInput = CreateClientInput;
+    clientName?: string;
+    logoUri?: string;
+}
+export type UpdateClientInput = Omit<CreateClientInput, 'backchannelLogoutUri' | 'clientName' | 'logoUri'> & {
+    backchannelLogoutUri?: string | null;
+    clientName?: string | null;
+    logoUri?: string | null;
+};
 export interface RoleCatalogEntry {
     name: string;
     description?: string;
@@ -188,6 +194,15 @@ export interface SettingEntry {
 }
 export interface SettingListResult {
     data: SettingEntry[];
+    locked: string[];
+}
+export interface DeletedResult {
+    ok: true;
+    deleted: string;
+}
+export interface ResetPasswordResult {
+    ok: true;
+    email: string;
 }
 export interface ImpersonationPanel {
     targetUserId: string;
@@ -308,6 +323,8 @@ export interface RevokeAllResult {
 }
 export interface AccountAppEntry {
     clientId: string;
+    name: string;
+    logoUrl: string | null;
     accessTokens: number;
     refreshTokens: number;
 }
@@ -315,6 +332,21 @@ export interface AccountAppsResult {
     supported: boolean;
     apps: AccountAppEntry[];
 }
+export interface AccountAgentGrant {
+    id: string;
+    clientId: string;
+    protocol: 'pact' | 'poppy';
+    scopes: Array<{
+        id: string;
+        description: string;
+    }>;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt: string;
+}
+export interface AccountAgentsResult {
+    agents: AccountAgentGrant[];
+}
 export interface RevokeAppResult {
     ok: boolean;
     [key: string]: unknown;

package/build/src/components/authorized_apps.js

@@ -1,29 +1,33 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { createElement } from 'react';
 import { useAuthkitConfig } from '../config.js';
-import { useAuthorizedApps } from '../hooks/use_authorized_apps.js';
+import { useAppsQueryOptions, useRevokeAppMutationOptions } from '../queries/account/index.js';
+import { authkitKeys } from '../queries/keys.js';
 function AuthorizedAppsInner({ className, revokeLabel = 'Revogar', emptyLabel = 'Nenhum app autorizado.', }) {
-    const { data, loading, error, actions } = useAuthorizedApps();
-    if (loading && !data) {
+    const qc = useQueryClient();
+    const query = useQuery(useAppsQueryOptions());
+    const revoke = useMutation({
+        ...useRevokeAppMutationOptions(),
+        onSuccess: () => qc.invalidateQueries({ queryKey: authkitKeys.account.apps() }),
+    });
+    if (query.isLoading && !query.data) {
         return createElement('div', { className: 'authkit-apps__loading' }, 'Carregando…');
     }
-    if (error) {
-        return createElement('p', { className: 'authkit-error', role: 'alert' }, error.message);
+    if (query.error) {
+        return createElement('p', { className: 'authkit-error', role: 'alert' }, query.error.message);
     }
-    const apps = data ?? [];
+    const apps = query.data?.apps ?? [];
     if (apps.length === 0) {
         return createElement('p', { className: 'authkit-apps__empty' }, emptyLabel);
     }
     return createElement('ul', { className: ['authkit-apps', className].filter(Boolean).join(' ') }, ...apps.map((app) => createElement('li', { key: app.clientId, className: 'authkit-apps__item' }, createElement('div', { className: 'authkit-apps__info' }, app.logoUrl
-        ? createElement('img', {
-            className: 'authkit-apps__logo',
-            src: app.logoUrl,
-            alt: '',
-        })
-        : null, createElement('span', { className: 'authkit-apps__name' }, app.name ?? app.clientId)), createElement('button', {
+        ? createElement('img', { className: 'authkit-apps__logo', src: app.logoUrl, alt: '' })
+        : null, createElement('span', { className: 'authkit-apps__name' }, app.name || app.clientId)), createElement('button', {
         type: 'button',
         className: 'authkit-button authkit-button--danger',
-        onClick: () => void actions.revoke(app.clientId),
+        disabled: revoke.isPending,
+        onClick: () => revoke.mutate(app.clientId),
     }, revokeLabel))));
 }
 export function AuthorizedApps(props) {