@adonis-agora/authkit-react 0.26.0 → 1.0.0-rc.1

package/README.md

@@ -17,8 +17,8 @@ pnpm add @adonis-agora/authkit-react
 
 ## 1. No host AdonisJS: compartilhar a prop `authkit`
 
-A shared-prop tem o formato `AuthSharedProps`. Use `auth.getUser()` /
-`auth.identity` do `@adonis-agora/authkit-client` para preenchê-la — tipicamente
+A shared-prop tem o formato `AuthSharedProps`. Use `authkit.getUser()` /
+`authkit.identity` do `@adonis-agora/authkit-client` para preenchê-la — tipicamente
 num middleware ou no `config/inertia.ts` (`sharedData`):
 
 ```ts
@@ -28,11 +28,11 @@ import { defineConfig } from '@adonisjs/inertia'
 export default defineConfig({
   sharedData: {
     authkit: async (ctx) => {
-      const auth = ctx.authkit // sua instância do Authenticator
-      const user = await auth.getUser() // mesmo shape de identityToUser/resolveUser
+      const authkit = ctx.authkit // sua instância do Authenticator
+      const user = await authkit.getUser() // mesmo shape de identityToUser/resolveUser
       return {
         user: user ?? null,
-        globalRoles: auth.identity?.globalRoles ?? [],
+        globalRoles: authkit.identity?.globalRoles ?? [],
       }
     },
   },
@@ -98,29 +98,39 @@ import { AuthProvider } from '@adonis-agora/authkit-react'
 
 ## 5. Config + componentes prontos
 
-Envolva a app com `<AuthkitProvider>` para configurar URLs/endpoints e use os
-hooks headless e componentes prontos:
+Envolva a app com `<AuthkitProvider>` (URLs, CSRF, modo de IdP). Os componentes de
+conta (`UserProfile`, `AuthorizedApps`, `OrganizationSwitcher`, `OrganizationProfile`)
+buscam dados pela Account API, então também precisam de `QueryClientProvider` +
+`AuthkitClientProvider`:
 
 ```tsx
 import '@adonis-agora/authkit-react/styles.css'
+import { QueryClientProvider } from '@tanstack/react-query'
 import {
+  AuthkitClientProvider,
   AuthkitProvider,
-  useSignIn, useSignOut, useUser, useProfile, useSessions, useAuthorizedApps,
-  SignInButton, SignOutButton, UserButton, UserProfile, AuthorizedApps,
+  createAuthkitQueryClient,
+  AuthorizedApps,
+  UserButton,
+  UserProfile,
 } from '@adonis-agora/authkit-react'
 
-<AuthkitProvider config={{ csrfToken: page.props.csrfToken }}>
-  <UserButton />
-  <UserProfile />
-  <AuthorizedApps />
-</AuthkitProvider>
+const queryClient = createAuthkitQueryClient()
+
+<QueryClientProvider client={queryClient}>
+  <AuthkitClientProvider>
+    <AuthkitProvider config={{ csrfToken: page.props.csrfToken }}>
+      <UserButton />
+      <UserProfile />
+      <AuthorizedApps />
+    </AuthkitProvider>
+  </AuthkitClientProvider>
+</QueryClientProvider>
 ```
 
-Defaults dos endpoints apontam para as rotas reais do host-kit
-(`/auth/login`, `/account/logout`, `/account/security`, `/account/security/profile`,
-`/account/apps`, …). Numa topologia de *client app*, aponte-os para rotas locais que
-redirecionam para o IdP. Temável via CSS vars `--authkit-*`. Veja a
-[doc de React](https://...) para detalhes.
+Para telas próprias, use as query options com `useQuery`/`useMutation`
+(`useMeQueryOptions`, `useAccountSessionsQueryOptions`, `useAppsQueryOptions`,
+`useAccountOrgsQueryOptions`, …). Temável via CSS vars `--authkit-*`.
 
 ## Helpers puros
 

package/build/index.d.ts

@@ -4,7 +4,7 @@ export type { AuthkitClient, AuthkitClientOptions, } from './src/client/client.j
 export { AuthkitClientError, createAuthkitClient, } from './src/client/client.js';
 export type { AuthkitClientProviderProps } from './src/client/context.js';
 export { AuthkitClientProvider, createAuthkitQueryClient, useAuthkitClient, } from './src/client/context.js';
-export type { AcceptOrgInvitationResult, AccountAppEntry, AccountAppsResult, AccountCapabilities, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgEntry, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionEntry, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminGrantEntry, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOrgMember, AdminOverview, AdminSessionEntry, AdminUser, AdminUserListResult, ApiErrorBody, AuditEventEntry, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DailyPoint, DeactivateOrgResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, ListMeta, ManagedKeyInfo, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PasskeySummaryEntry, PatEntry, PersonalAgentConnection, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentEntry, PersonalAgentListStatus, PersonalAgentProtocol, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult, } from './src/client/types.js';
+export type { AcceptOrgInvitationResult, AccountAgentGrant, AccountAgentsResult, AccountAppEntry, AccountAppsResult, AccountCapabilities, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgEntry, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionEntry, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminGrantEntry, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOrgMember, AdminOverview, AdminSessionEntry, AdminUser, AdminUserListResult, ApiErrorBody, AuditEventEntry, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DailyPoint, DeactivateOrgResult, DeletedResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, ListMeta, ManagedKeyInfo, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PasskeySummaryEntry, PatEntry, PersonalAgentConnection, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentEntry, PersonalAgentExtensionOverview, PersonalAgentListStatus, PersonalAgentPactOverview, PersonalAgentProtocol, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, ResetPasswordResult, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult, } from './src/client/types.js';
 export type { AuthenticatedProps, GuestProps, } from './src/components/authenticated.js';
 export { Authenticated, Guest } from './src/components/authenticated.js';
 export type { AuthorizedAppsProps } from './src/components/authorized_apps.js';
@@ -41,16 +41,8 @@ export type { UserProfileProps } from './src/components/user_profile.js';
 export { UserProfile } from './src/components/user_profile.js';
 export type { AuthkitConfig, AuthkitEndpoints, AuthkitIdpMode, ResolvedAuthkitConfig, } from './src/config.js';
 export { AuthkitConfigContext, buildAuthUrl, DEFAULT_CONFIG, resolveConfig, useAuthkitConfig, } from './src/config.js';
-export type { AuthorizedApp, UseAuthorizedAppsResult, } from './src/hooks/use_authorized_apps.js';
-export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
 export type { UseCanResult } from './src/hooks/use_can.js';
 export { checkCan, invalidateCanCache, useCan } from './src/hooks/use_can.js';
-export type { OrgInvitationEntry, UseOrgInvitationsResult, } from './src/hooks/use_org_invitations.js';
-export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
-export type { ActiveOrgDetail, OrgMemberEntry, UseOrganizationResult, } from './src/hooks/use_organization.js';
-export { useOrganization } from './src/hooks/use_organization.js';
-export type { OrgEntry, UseOrganizationsResult, } from './src/hooks/use_organizations.js';
-export { useOrganizations } from './src/hooks/use_organizations.js';
 export type { UsePasskeyAssertionOptions, UsePasskeyAssertionResult, } from './src/hooks/use_passkey_assertion.js';
 export { usePasskeyAssertion } from './src/hooks/use_passkey_assertion.js';
 export type { UsePasskeyAutofillOptions } from './src/hooks/use_passkey_autofill.js';
@@ -61,18 +53,11 @@ export type { UsePasskeyRegistrationOptions, UsePasskeyRegistrationResult, } fro
 export { usePasskeyRegistration } from './src/hooks/use_passkey_registration.js';
 export type { PasswordScorer, PasswordStrengthResult, PasswordStrengthScore, UsePasswordStrengthOptions, } from './src/hooks/use_password_strength.js';
 export { heuristicScorer, usePasswordStrength, } from './src/hooks/use_password_strength.js';
-export type { ProfileUpdate, UseProfileResult, } from './src/hooks/use_profile.js';
-export { useProfile } from './src/hooks/use_profile.js';
-export type { ResourceState } from './src/hooks/use_resource.js';
-export { jsonRequest, useResource } from './src/hooks/use_resource.js';
-export type { AuthSession, UseSessionsResult, } from './src/hooks/use_sessions.js';
-export { useSessions } from './src/hooks/use_sessions.js';
+export { jsonRequest } from './src/hooks/use_resource.js';
 export type { SignInOptions } from './src/hooks/use_sign_in.js';
 export { useSignIn } from './src/hooks/use_sign_in.js';
 export type { SignOutOptions } from './src/hooks/use_sign_out.js';
 export { useSignOut } from './src/hooks/use_sign_out.js';
-export type { UseSwitchOrganizationResult } from './src/hooks/use_switch_organization.js';
-export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
 export type { UseUserResult } from './src/hooks/use_user.js';
 export { useUser } from './src/hooks/use_user.js';
 export type { LastLoginMethod } from './src/interaction/last_used.js';
@@ -89,7 +74,7 @@ export type { RunPasskeyAssertionDeps, RunPasskeyFlowOptions, RunPasskeyRegistra
 export { runPasskeyAssertion, runPasskeyRegistration } from './src/passkey/sudo.js';
 export type { AuthProviderProps } from './src/provider.js';
 export { AuthContext, AuthProvider } from './src/provider.js';
-export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
+export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountAgentsQueryOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAccountAgentMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
 export { useAddOrgMemberMutationOptions, useAuditQueryOptions, useClientQueryOptions, useClientsQueryOptions, useCreateClientMutationOptions, useCreateOrgInvitationMutationOptions, useCreateOrgMutationOptions, useCreateRoleMutationOptions, useCreateUserMutationOptions, useDeleteClientMutationOptions, useDeleteOrgMutationOptions, useDeleteRoleMutationOptions, useDeleteUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useOrgQueryOptions, useOrgsQueryOptions, useOverviewQueryOptions, usePersonalAgentConnectionsQueryOptions, usePersonalAgentsQueryOptions, useRegenerateClientSecretMutationOptions, useRemoveOrgMemberMutationOptions, useRemovePersonalAgentEntryMutationOptions, useRemoveSettingMutationOptions, useResetPasswordMutationOptions, useRevokeAllSessionsMutationOptions, useRevokeOrgInvitationMutationOptions, useRevokePersonalAgentConnectionMutationOptions, useRevokeUserSessionsMutationOptions, useRolesQueryOptions, useRotateKeysMutationOptions, useSessionsQueryOptions, useSetPersonalAgentStatusMutationOptions, useSetSettingMutationOptions, useSettingsQueryOptions, useUpdateClientMutationOptions, useUpdateOrgMemberRoleMutationOptions, useUpdateOrgMutationOptions, useUpdateRoleMutationOptions, useUpdateUserMutationOptions, useUserQueryOptions, useUserSessionsQueryOptions, useUsersQueryOptions, } from './src/queries/admin/index.js';
 export { authkitKeys } from './src/queries/keys.js';
 export { hasAllGlobalRoles, hasAnyGlobalRole, hasGlobalRole, } from './src/roles.js';

package/build/index.js

@@ -19,22 +19,15 @@ export { SignOutButton } from './src/components/sign_out_button.js';
 export { UserButton } from './src/components/user_button.js';
 export { UserProfile } from './src/components/user_profile.js';
 export { AuthkitConfigContext, buildAuthUrl, DEFAULT_CONFIG, resolveConfig, useAuthkitConfig, } from './src/config.js';
-export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
 export { checkCan, invalidateCanCache, useCan } from './src/hooks/use_can.js';
-export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
-export { useOrganization } from './src/hooks/use_organization.js';
-export { useOrganizations } from './src/hooks/use_organizations.js';
 export { usePasskeyAssertion } from './src/hooks/use_passkey_assertion.js';
 export { usePasskeyAutofill } from './src/hooks/use_passkey_autofill.js';
 export { usePasskeyLogin } from './src/hooks/use_passkey_login.js';
 export { usePasskeyRegistration } from './src/hooks/use_passkey_registration.js';
 export { heuristicScorer, usePasswordStrength, } from './src/hooks/use_password_strength.js';
-export { useProfile } from './src/hooks/use_profile.js';
-export { jsonRequest, useResource } from './src/hooks/use_resource.js';
-export { useSessions } from './src/hooks/use_sessions.js';
+export { jsonRequest } from './src/hooks/use_resource.js';
 export { useSignIn } from './src/hooks/use_sign_in.js';
 export { useSignOut } from './src/hooks/use_sign_out.js';
-export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
 export { useUser } from './src/hooks/use_user.js';
 export { isLastUsedLoginMethod } from './src/interaction/last_used.js';
 export { interactionUrls, OTP_CODE_FIELD, oauthRedirectUrl } from './src/interaction/urls.js';
@@ -43,7 +36,7 @@ export { submitClassicForm } from './src/passkey/classic_form.js';
 export { registerPasskeyJson } from './src/passkey/json_registration.js';
 export { runPasskeyAssertion, runPasskeyRegistration } from './src/passkey/sudo.js';
 export { AuthContext, AuthProvider } from './src/provider.js';
-export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
+export { useAccountAcceptOrgInvitationMutationOptions, useAccountActivateOrgMutationOptions, useAccountAgentsQueryOptions, useAccountCreateOrgMutationOptions, useAccountDeactivateOrgMutationOptions, useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgInvitationsQueryOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, useAccountRemoveOrgMemberMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAccountRevokeOrgInvitationMutationOptions, useAccountSessionsQueryOptions, useAccountUpdateOrgMemberRoleMutationOptions, useAppsQueryOptions, useCancelEmailChangeMutationOptions, useChangePasswordMutationOptions, useConfirmTotpMutationOptions, useCreateTokenMutationOptions, useDisableTotpMutationOptions, useEmailChangeMutationOptions, useEnrollTotpMutationOptions, useLoginMethodsQueryOptions, useMeQueryOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRegenerateRecoveryCodesMutationOptions, useRegisterPasskeyMutationOptions, useRemovePasskeyMutationOptions, useRevokeAccountAgentMutationOptions, useRevokeAppMutationOptions, useRevokeOtherSessionsMutationOptions, useRevokeSessionMutationOptions, useRevokeTokenMutationOptions, useSecurityQueryOptions, useTokensQueryOptions, useUpdateLoginMethodsMutationOptions, useUpdateProfileMutationOptions, } from './src/queries/account/index.js';
 export { useAddOrgMemberMutationOptions, useAuditQueryOptions, useClientQueryOptions, useClientsQueryOptions, useCreateClientMutationOptions, useCreateOrgInvitationMutationOptions, useCreateOrgMutationOptions, useCreateRoleMutationOptions, useCreateUserMutationOptions, useDeleteClientMutationOptions, useDeleteOrgMutationOptions, useDeleteRoleMutationOptions, useDeleteUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useOrgQueryOptions, useOrgsQueryOptions, useOverviewQueryOptions, usePersonalAgentConnectionsQueryOptions, usePersonalAgentsQueryOptions, useRegenerateClientSecretMutationOptions, useRemoveOrgMemberMutationOptions, useRemovePersonalAgentEntryMutationOptions, useRemoveSettingMutationOptions, useResetPasswordMutationOptions, useRevokeAllSessionsMutationOptions, useRevokeOrgInvitationMutationOptions, useRevokePersonalAgentConnectionMutationOptions, useRevokeUserSessionsMutationOptions, useRolesQueryOptions, useRotateKeysMutationOptions, useSessionsQueryOptions, useSetPersonalAgentStatusMutationOptions, useSetSettingMutationOptions, useSettingsQueryOptions, useUpdateClientMutationOptions, useUpdateOrgMemberRoleMutationOptions, useUpdateOrgMutationOptions, useUpdateRoleMutationOptions, useUpdateUserMutationOptions, useUserQueryOptions, useUserSessionsQueryOptions, useUsersQueryOptions, } from './src/queries/admin/index.js';
 export { authkitKeys } from './src/queries/keys.js';
 export { hasAllGlobalRoles, hasAnyGlobalRole, hasGlobalRole, } from './src/roles.js';

package/build/src/client/client.d.ts

@@ -1,4 +1,4 @@
-import type { AcceptOrgInvitationResult, AccountAppsResult, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOverview, AdminUser, AdminUserListResult, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DeactivateOrgResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult } from './types.js';
+import type { AcceptOrgInvitationResult, AccountAgentsResult, AccountAppsResult, AccountLoginMethodsResult, AccountMe, AccountMfaStatus, AccountOrgDetail, AccountOrgInvitationsResult, AccountOrgsResult, AccountPasskeysResult, AccountSecurityOverview, AccountSessionsResult, AccountTokensResult, ActivateOrgResult, AdminClient, AdminClientListResult, AdminOrgDetail, AdminOrgEntry, AdminOrgInvitation, AdminOrgListResult, AdminOverview, AdminUser, AdminUserListResult, AuditListParams, AuditListResult, ChangePasswordInput, CreateAccountOrgInput, CreateClientInput, CreatedAccountOrgResult, CreatedClientResult, CreatedOrgInvitationResult, CreatedPatResult, CreateOrgInput, CreateRoleInput, CreateTokenInput, CreateUserInput, DeactivateOrgResult, DeletedResult, EmailChangeResult, ImpersonationPanel, InviteOrgMemberInput, KeysRotateInput, KeysRotateResult, KeysStatus, LeaveOrgResult, MfaConfirmResult, MfaDisableResult, MfaEnrollResult, MfaRecoveryCodesResult, OkResult, PasskeyRegistrationOptions, PersonalAgentConnectionsParams, PersonalAgentConnectionsResult, PersonalAgentRegistryInput, PersonalAgentRegistryResult, PersonalAgentsOverview, RegenerateSecretResult, RemoveOrgMemberResult, RemovePasskeyResult, RequestEmailChangeInput, ResetPasswordResult, RevokeAllResult, RevokeAppResult, RevokeOrgInvitationResult, RevokeOthersResult, RevokeSessionResult, RevokeSessionsResult, RevokeTokenResult, RoleCatalogEntry, RoleListResult, SettingEntry, SettingListResult, UpdateClientInput, UpdateLoginMethodsResult, UpdateOrgInput, UpdateOrgMemberRoleResult, UpdateProfileInput, UpdateProfileResult, UpdateRoleInput, UpdateUserInput, UserLoginMethodsInput, UserSessionsResult } from './types.js';
 export declare class AuthkitClientError extends Error {
     readonly status: number;
     readonly code?: string | undefined;
@@ -39,22 +39,10 @@ declare class AuthkitClient {
                 invited?: boolean;
             }>;
             readonly update: (id: string, data: UpdateUserInput) => Promise<AdminUser>;
-            readonly disable: (id: string) => Promise<{
-                id: string;
-                disabled: true;
-            }>;
-            readonly enable: (id: string) => Promise<{
-                id: string;
-                disabled: false;
-            }>;
-            readonly resetPassword: (id: string) => Promise<{
-                id: string;
-                sent: boolean;
-            }>;
-            readonly remove: (id: string) => Promise<{
-                id: string;
-                deleted: boolean;
-            }>;
+            readonly disable: (id: string) => Promise<AdminUser>;
+            readonly enable: (id: string) => Promise<AdminUser>;
+            readonly resetPassword: (id: string) => Promise<ResetPasswordResult>;
+            readonly remove: (id: string) => Promise<DeletedResult>;
             readonly getSessions: (id: string) => Promise<UserSessionsResult>;
             readonly revokeSessions: (id: string) => Promise<RevokeSessionsResult>;
         };
@@ -67,10 +55,7 @@ declare class AuthkitClient {
             readonly get: (id: string) => Promise<AdminClient>;
             readonly create: (data?: CreateClientInput) => Promise<CreatedClientResult>;
             readonly update: (id: string, data?: UpdateClientInput) => Promise<AdminClient>;
-            readonly remove: (id: string) => Promise<{
-                clientId: string;
-                deleted: boolean;
-            }>;
+            readonly remove: (id: string) => Promise<DeletedResult>;
             readonly regenerateSecret: (id: string) => Promise<RegenerateSecretResult>;
         };
         readonly roles: {
@@ -162,6 +147,12 @@ declare class AuthkitClient {
             readonly list: () => Promise<AccountAppsResult>;
             readonly revoke: (clientId: string) => Promise<RevokeAppResult>;
         };
+        readonly agents: {
+            readonly list: () => Promise<AccountAgentsResult>;
+            readonly revoke: (grantId: string) => Promise<{
+                ok: true;
+            }>;
+        };
         readonly mfa: (() => Promise<AccountMfaStatus>) & {
             enroll: () => Promise<MfaEnrollResult>;
             confirm: (code: string) => Promise<MfaConfirmResult>;

package/build/src/client/client.js

@@ -13,16 +13,6 @@ export class AuthkitClientError extends Error {
     isUnauthorized;
 }
 const MUTATING = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
-function resolveWindow() {
-    try {
-        if (typeof window === 'undefined')
-            return null;
-        return window.__AUTHKIT__ ?? null;
-    }
-    catch {
-        return null;
-    }
-}
 function toQueryString(params) {
     const parts = [];
     for (const [k, v] of Object.entries(params)) {
@@ -38,10 +28,9 @@ class AuthkitClient {
     _csrfToken;
     _fetch;
     constructor(opts = {}) {
-        const win = resolveWindow();
-        this._baseUrl = opts.baseUrl ?? win?.endpoints.api;
+        this._baseUrl = opts.baseUrl;
         this._accountBaseUrl = opts.accountBaseUrl ?? '/account/api';
-        this._csrfToken = opts.csrfToken ?? win?.csrfToken;
+        this._csrfToken = opts.csrfToken;
         this._fetch = opts.fetch ?? globalThis.fetch.bind(globalThis);
     }
     async request(method, url, body, extraHeaders) {
@@ -101,8 +90,7 @@ class AuthkitClient {
     }
     b(path) {
         if (!this._baseUrl) {
-            throw new Error('[AuthkitClient] admin base URL ausente: passe `baseUrl` em createAuthkitClient({ baseUrl }) ' +
-                'ou use o client onde window.__AUTHKIT__ está injetado (console admin). ' +
+            throw new Error('[AuthkitClient] admin base URL ausente: passe `baseUrl` em createAuthkitClient({ baseUrl }). ' +
                 'Telas que só usam client.account.* não precisam de baseUrl.');
         }
         return `${this._baseUrl}${path}`;
@@ -213,6 +201,10 @@ class AuthkitClient {
             list: () => this.get(this.a('/apps')),
             revoke: (clientId) => this.delete(this.a(`/apps/${encodeURIComponent(clientId)}`)),
         },
+        agents: {
+            list: () => this.get(this.a('/agents')),
+            revoke: (grantId) => this.delete(this.a(`/agents/${encodeURIComponent(grantId)}`)),
+        },
         mfa: Object.assign(() => this.get(this.a('/mfa')), {
             enroll: () => this.post(this.a('/mfa/totp/enroll')),
             confirm: (code) => this.post(this.a('/mfa/totp/confirm'), { code }),

package/build/src/client/types.d.ts

@@ -25,14 +25,12 @@ export interface AdminUserListResult {
 }
 export interface CreateUserInput {
     email: string;
-    name?: string | null;
-    password?: string | null;
+    name?: string;
+    password?: string;
     invite?: boolean;
 }
 export interface UpdateUserInput {
     globalRoles?: string[];
-    name?: string | null;
-    avatarUrl?: string | null;
 }
 export interface AdminSessionEntry {
     id: string;
@@ -71,13 +69,15 @@ export interface AdminSessionListResult {
 export interface AdminClient {
     clientId: string;
     confidential: boolean;
-    grants: string[];
+    grantTypes: string[];
     redirectUris: string[];
     postLogoutRedirectUris: string[];
     tokenEndpointAuthMethod: string;
     applicationType?: 'web' | 'native';
     backchannelLogoutUri: string | null;
     backchannelLogoutSessionRequired: boolean;
+    clientName: string | null;
+    logoUri: string | null;
 }
 export interface AdminClientListResult {
     data: AdminClient[];
@@ -100,8 +100,14 @@ export interface CreateClientInput {
     applicationType?: 'web' | 'native';
     backchannelLogoutUri?: string;
     backchannelLogoutSessionRequired?: boolean;
-}
-export type UpdateClientInput = CreateClientInput;
+    clientName?: string;
+    logoUri?: string;
+}
+export type UpdateClientInput = Omit<CreateClientInput, 'backchannelLogoutUri' | 'clientName' | 'logoUri'> & {
+    backchannelLogoutUri?: string | null;
+    clientName?: string | null;
+    logoUri?: string | null;
+};
 export interface RoleCatalogEntry {
     name: string;
     description?: string;
@@ -188,6 +194,15 @@ export interface SettingEntry {
 }
 export interface SettingListResult {
     data: SettingEntry[];
+    locked: string[];
+}
+export interface DeletedResult {
+    ok: true;
+    deleted: string;
+}
+export interface ResetPasswordResult {
+    ok: true;
+    email: string;
 }
 export interface ImpersonationPanel {
     targetUserId: string;
@@ -308,6 +323,8 @@ export interface RevokeAllResult {
 }
 export interface AccountAppEntry {
     clientId: string;
+    name: string;
+    logoUrl: string | null;
     accessTokens: number;
     refreshTokens: number;
 }
@@ -315,6 +332,21 @@ export interface AccountAppsResult {
     supported: boolean;
     apps: AccountAppEntry[];
 }
+export interface AccountAgentGrant {
+    id: string;
+    clientId: string;
+    protocol: PersonalAgentProtocol;
+    scopes: Array<{
+        id: string;
+        description: string;
+    }>;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt: string;
+}
+export interface AccountAgentsResult {
+    agents: AccountAgentGrant[];
+}
 export interface RevokeAppResult {
     ok: boolean;
     [key: string]: unknown;
@@ -536,7 +568,7 @@ export interface KeysRotateResult {
     retiredKids: string[];
     keptKids: string[];
 }
-export type PersonalAgentProtocol = 'pact' | 'poppy';
+export type PersonalAgentProtocol = 'pact' | (string & {});
 export type PersonalAgentListStatus = 'allowed' | 'blocked';
 export interface PersonalAgentEntry {
     protocol: PersonalAgentProtocol;
@@ -555,18 +587,23 @@ export interface PersonalAgentEntry {
 }
 export interface PersonalAgentsOverview {
     protocols: {
-        pact: {
-            open: boolean;
-            hostResolver: boolean;
-        } | null;
-        poppy: {
-            requireRegistration: boolean;
-            hostResolver: boolean;
-            allowInsecureClientIds: boolean;
-        } | null;
+        pact: PersonalAgentPactOverview | null;
+        [protocol: string]: PersonalAgentPactOverview | PersonalAgentExtensionOverview | null;
     };
     agents: PersonalAgentEntry[];
 }
+export interface PersonalAgentPactOverview {
+    open: boolean;
+    hostResolver: boolean;
+}
+export interface PersonalAgentExtensionOverview {
+    label: string;
+    requireRegistration: boolean;
+    hostResolver: boolean;
+    allowHttpIdentifiers: boolean;
+    identifierLabel: string;
+    identifierPlaceholder: string | null;
+}
 export interface PersonalAgentConnection {
     id: string;
     protocol: PersonalAgentProtocol;

package/build/src/components/authorized_apps.js

@@ -1,29 +1,33 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { createElement } from 'react';
 import { useAuthkitConfig } from '../config.js';
-import { useAuthorizedApps } from '../hooks/use_authorized_apps.js';
+import { useAppsQueryOptions, useRevokeAppMutationOptions } from '../queries/account/index.js';
+import { authkitKeys } from '../queries/keys.js';
 function AuthorizedAppsInner({ className, revokeLabel = 'Revogar', emptyLabel = 'Nenhum app autorizado.', }) {
-    const { data, loading, error, actions } = useAuthorizedApps();
-    if (loading && !data) {
+    const qc = useQueryClient();
+    const query = useQuery(useAppsQueryOptions());
+    const revoke = useMutation({
+        ...useRevokeAppMutationOptions(),
+        onSuccess: () => qc.invalidateQueries({ queryKey: authkitKeys.account.apps() }),
+    });
+    if (query.isLoading && !query.data) {
         return createElement('div', { className: 'authkit-apps__loading' }, 'Carregando…');
     }
-    if (error) {
-        return createElement('p', { className: 'authkit-error', role: 'alert' }, error.message);
+    if (query.error) {
+        return createElement('p', { className: 'authkit-error', role: 'alert' }, query.error.message);
     }
-    const apps = data ?? [];
+    const apps = query.data?.apps ?? [];
     if (apps.length === 0) {
         return createElement('p', { className: 'authkit-apps__empty' }, emptyLabel);
     }
     return createElement('ul', { className: ['authkit-apps', className].filter(Boolean).join(' ') }, ...apps.map((app) => createElement('li', { key: app.clientId, className: 'authkit-apps__item' }, createElement('div', { className: 'authkit-apps__info' }, app.logoUrl
-        ? createElement('img', {
-            className: 'authkit-apps__logo',
-            src: app.logoUrl,
-            alt: '',
-        })
-        : null, createElement('span', { className: 'authkit-apps__name' }, app.name ?? app.clientId)), createElement('button', {
+        ? createElement('img', { className: 'authkit-apps__logo', src: app.logoUrl, alt: '' })
+        : null, createElement('span', { className: 'authkit-apps__name' }, app.name || app.clientId)), createElement('button', {
         type: 'button',
         className: 'authkit-button authkit-button--danger',
-        onClick: () => void actions.revoke(app.clientId),
+        disabled: revoke.isPending,
+        onClick: () => revoke.mutate(app.clientId),
     }, revokeLabel))));
 }
 export function AuthorizedApps(props) {

package/build/src/components/organization_profile.js

@@ -1,61 +1,53 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { createElement, useState } from 'react';
 import { useAuthkitConfig } from '../config.js';
-import { useOrganization } from '../hooks/use_organization.js';
-import { useOrganizations } from '../hooks/use_organizations.js';
-import { jsonRequest } from '../hooks/use_resource.js';
+import { useAccountInviteOrgMemberMutationOptions, useAccountLeaveOrgMutationOptions, useAccountOrgQueryOptions, useAccountOrgsQueryOptions, } from '../queries/account/index.js';
+import { authkitKeys } from '../queries/keys.js';
 import { useAuth } from '../use_auth.js';
 function OrganizationProfileInner({ inviteLabel = 'Convidar membro', leaveLabel = 'Sair da organização', className, }) {
     const { isAuthenticated } = useAuth();
-    const config = useAuthkitConfig();
-    const { activeOrgId, actions: orgListActions } = useOrganizations();
-    const { data: org, loading, error, actions } = useOrganization(activeOrgId);
+    const qc = useQueryClient();
+    const orgs = useQuery({ ...useAccountOrgsQueryOptions(), enabled: isAuthenticated });
+    const activeOrgId = orgs.data?.activeOrgId ?? null;
+    const orgQuery = useAccountOrgQueryOptions(activeOrgId ?? '');
+    const detail = useQuery({ ...orgQuery, enabled: isAuthenticated && activeOrgId !== null });
+    const invite = useMutation({
+        ...useAccountInviteOrgMemberMutationOptions(),
+        onSuccess: () => qc.invalidateQueries({ queryKey: orgQuery.queryKey }),
+    });
+    const leave = useMutation({
+        ...useAccountLeaveOrgMutationOptions(),
+        onSuccess: () => Promise.all([
+            qc.invalidateQueries({ queryKey: authkitKeys.account.orgs() }),
+            qc.invalidateQueries({ queryKey: authkitKeys.account.me() }),
+        ]),
+    });
     const [inviteEmail, setInviteEmail] = useState('');
     const [inviteRole, setInviteRole] = useState('member');
-    const [inviteLoading, setInviteLoading] = useState(false);
-    const [inviteError, setInviteError] = useState(null);
     if (!isAuthenticated || !activeOrgId)
         return null;
-    if (loading)
+    if (detail.isLoading)
         return createElement('div', { className: 'authkit-org-profile__loading' }, 'Carregando…');
-    if (error)
-        return createElement('div', { className: 'authkit-error' }, error.message);
+    if (detail.error)
+        return createElement('div', { className: 'authkit-error' }, detail.error.message);
+    const org = detail.data;
     if (!org)
         return null;
-    const base = config.endpoints.orgs.replace('/json', '');
     const handleInvite = async (e) => {
         e.preventDefault();
         if (!inviteEmail.trim())
             return;
-        setInviteLoading(true);
-        setInviteError(null);
         try {
-            await jsonRequest(`${base}/${encodeURIComponent(activeOrgId)}/invite`, {
-                method: 'POST',
-                body: JSON.stringify({ email: inviteEmail.trim(), role: inviteRole }),
-                csrfToken: config.csrfToken,
-            });
+            await invite.mutateAsync({ orgId: activeOrgId, email: inviteEmail.trim(), role: inviteRole });
             setInviteEmail('');
-            await actions.refetch();
-        }
-        catch (err) {
-            setInviteError(err);
-        }
-        finally {
-            setInviteLoading(false);
-        }
-    };
-    const handleLeave = async () => {
-        try {
-            await jsonRequest(`${base}/${encodeURIComponent(activeOrgId)}/leave`, {
-                method: 'POST',
-                csrfToken: config.csrfToken,
-            });
-            await orgListActions.refetch();
         }
         catch {
         }
     };
+    const handleLeave = () => {
+        leave.mutate(activeOrgId);
+    };
     const memberList = createElement('div', { className: 'authkit-org-profile__members' }, createElement('h3', { className: 'authkit-org-profile__section-title' }, 'Membros'), ...(org.members.length === 0
         ? [createElement('p', { className: 'authkit-org-profile__empty' }, 'Nenhum membro.')]
         : org.members.map((m) => createElement('div', { key: m.accountId, className: 'authkit-org-profile__member' }, createElement('div', { className: 'authkit-org-profile__member-info' }, createElement('span', { className: 'authkit-org-profile__member-email' }, m.email ?? m.accountId), createElement('span', { className: 'authkit-org-profile__member-role' }, m.role))))));
@@ -71,13 +63,13 @@ function OrganizationProfileInner({ inviteLabel = 'Convidar membro', leaveLabel
             placeholder: 'Papel (ex: member)',
             value: inviteRole,
             onChange: (e) => setInviteRole(e.target.value),
-        }), inviteError
-            ? createElement('p', { className: 'authkit-error', role: 'alert' }, inviteError.message)
+        }), invite.error
+            ? createElement('p', { className: 'authkit-error', role: 'alert' }, invite.error.message)
             : null, createElement('button', {
             type: 'submit',
             className: 'authkit-button authkit-button--primary',
-            disabled: inviteLoading,
-        }, inviteLoading ? 'Enviando…' : inviteLabel))
+            disabled: invite.isPending,
+        }, invite.isPending ? 'Enviando…' : inviteLabel))
         : null;
     const leaveButton = createElement('button', {
         type: 'button',