@aindy/ui-kit 1.0.6 → 2.1.0

package/dist/api/_core.d.ts

@@ -1,4 +1,6 @@
 export function taggedRequest(domain: any, apiFn: any): (...args: any[]) => any;
+/** Test seam: forget that the backend has been seen stamping. */
+export function _resetEnvelopeDetection(): void;
 export function unwrapEnvelope(response: any): any;
 export function getStoredToken(): string;
 export function setStoredToken(token: any): void;
@@ -11,6 +13,7 @@ export class ApiError extends Error {
     status: any;
     body: any;
 }
+export const ENVELOPE_HEADER: "X-AINDY-Envelope";
 export const API_BASE: any;
 export function authRequest(path: any, opts?: {}): Promise<any>;
 export function request(path: any, opts?: {}): Promise<any>;

package/dist/api/_core.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/api/_routes.d.ts

@@ -9,6 +9,10 @@ export const ROUTES: Readonly<{
         LOGIN: "/auth/login";
         REGISTER: "/auth/register";
         LOGOUT: "/auth/logout";
+        VERIFY_EMAIL: "/auth/verify-email";
+        PASSWORD_CHANGE: "/auth/password/change";
+        PASSWORD_FORGOT: "/auth/password/forgot";
+        PASSWORD_RESET: "/auth/password/reset";
     }>;
     TASKS: Readonly<{
         LIST: "/tasks/list";

package/dist/api/auth.d.ts

@@ -1,4 +1,36 @@
 export function loginUser(credentials: any): Promise<any>;
+/**
+ * Begin registration. Against runtime >= 2.0.0 this resolves to
+ * `{ status: "verification_sent" }` and **carries no access token** — the response is
+ * deliberately identical whether or not the address was already registered, which is what
+ * closes the account-enumeration oracle. The token is issued by `verifyEmail` once the
+ * emailed link is followed.
+ */
 export function registerUser(credentials: any): Promise<any>;
+/** Consume an emailed verification token and receive the access token. */
+export function verifyEmail(token: any): Promise<any>;
+/**
+ * Rotate the signed-in user's password.
+ *
+ * Returns a freshly-versioned access token. **It must be stored** — the change invalidates
+ * every session including this one, so keeping the old token 401s on the next request.
+ */
+export function changePassword(currentPassword: any, newPassword: any, token?: string): Promise<any>;
+/**
+ * Begin password recovery.
+ *
+ * Resolves identically whether or not the address is registered — do not branch on the
+ * result to tell the user whether an account exists, that is the oracle this avoids. A 503
+ * means the deployment has no email channel configured, which is about the deployment and
+ * not about any account.
+ */
+export function forgotPassword(email: any): Promise<any>;
+/**
+ * Complete password recovery with an emailed token.
+ *
+ * Returns no access token — unlike `changePassword`, the caller has not proven they hold a
+ * session, so they sign in afresh.
+ */
+export function resetPassword(token: any, newPassword: any): Promise<any>;
 export function logoutUser(token?: string): Promise<any>;
 export function bootIdentity(token?: string): Promise<any>;

package/dist/api/index.d.ts

@@ -1,3 +1,3 @@
 export { ROUTES } from './_routes.js';
 export { ApiError, adminRequest, authRequest, authRequestExternal, buildApiUrl, clearStoredToken, getStoredToken, request, requestAbsolute, setStoredToken, taggedRequest, unwrapEnvelope, API_BASE } from './_core.js';
-export { bootIdentity, loginUser, registerUser } from './auth.js';
+export { bootIdentity, changePassword, forgotPassword, loginUser, registerUser, resetPassword, verifyEmail } from './auth.js';