@atlasauth/js 0.14.0 → 0.16.0

package/dist/password-reset.d.ts

@@ -16,6 +16,12 @@ import type { FapiClient } from './fapi';
 export interface ResetAttempt {
     id: string;
     status: string;
+    /**
+     * Present when the application resets by emailed link: poll
+     * {@link pollPasswordReset} with it until the link is opened (perhaps on
+     * another device), then carry on from the new status.
+     */
+    poll_secret?: string;
 }
 export interface ResetFlowState {
     attempt: ResetAttempt | null;
@@ -39,3 +45,9 @@ export declare function advancePasswordReset(client: FapiClient, state: ResetFlo
 /** The step a reset flow is on — what the UI should collect next. */
 export type ResetStep = 'request' | 'collect_email_code' | 'collect_second_factor' | 'collect_new_password' | 'done' | 'unknown';
 export declare function resetStep(state: ResetFlowState): ResetStep;
+/**
+ * Link mode: check whether the emailed reset link was opened. Resolves the
+ * flow at its current status (`needs_new_password` / `needs_second_factor`
+ * once it was); unchanged while still waiting or when the server can't say.
+ */
+export declare function pollPasswordReset(client: FapiClient, state: ResetFlowState): Promise<ResetFlowState>;

package/dist/password-reset.js

@@ -4,6 +4,7 @@ exports.initialResetFlow = void 0;
 exports.startPasswordReset = startPasswordReset;
 exports.advancePasswordReset = advancePasswordReset;
 exports.resetStep = resetStep;
+exports.pollPasswordReset = pollPasswordReset;
 exports.initialResetFlow = {
     attempt: null,
     errors: [],
@@ -77,4 +78,18 @@ function resetStep(state) {
             return 'unknown';
     }
 }
+/**
+ * Link mode: check whether the emailed reset link was opened. Resolves the
+ * flow at its current status (`needs_new_password` / `needs_second_factor`
+ * once it was); unchanged while still waiting or when the server can't say.
+ */
+async function pollPasswordReset(client, state) {
+    const attempt = state.attempt;
+    if (!attempt?.poll_secret)
+        return state;
+    const res = await client.get(`/v1/client/password_resets/${attempt.id}?poll_secret=${encodeURIComponent(attempt.poll_secret)}`);
+    if (!res.ok || !res.data)
+        return state;
+    return { ...state, attempt: { id: res.data.id, status: res.data.status, poll_secret: attempt.poll_secret } };
+}
 //# sourceMappingURL=password-reset.js.map

package/dist/password-reset.js.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../src/password-reset.ts"],"names":[],"mappings":";;;AAqCA,gDAWC;AAOD,oDAuCC;AAWD,8BAeC;AA3FY,QAAA,gBAAgB,GAAmB;IAC9C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,0FAA0F;AACnF,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAa,EACb,YAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAe,4BAA4B,EAAE;QACxE,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,wBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7E,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,KAAqB,EACrB,MAA4C;IAE5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,0BAA0B;YAC7B,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,uBAAuB,CAAC;YACvE,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,qBAAqB;YACxB,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,wBAAwB,CAAC;YACxE,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,oBAAoB;YACvB,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,mBAAmB,CAAC;YACnE,IAAI,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM;QACR;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAqC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,2EAA2E;QAC3E,oCAAoC;QACpC,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,OAAO;QACL,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;QACrD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;KAChC,CAAC;AACJ,CAAC;AAWD,SAAgB,SAAS,CAAC,KAAqB;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,0BAA0B;YAC7B,OAAO,oBAAoB,CAAC;QAC9B,KAAK,qBAAqB;YACxB,OAAO,uBAAuB,CAAC;QACjC,KAAK,oBAAoB;YACvB,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}
+{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../src/password-reset.ts"],"names":[],"mappings":";;;AA2CA,gDAWC;AAOD,oDAuCC;AAWD,8BAeC;AAOD,8CAQC;AA1GY,QAAA,gBAAgB,GAAmB;IAC9C,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,0FAA0F;AACnF,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAa,EACb,YAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAe,4BAA4B,EAAE;QACxE,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,wBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7E,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,KAAqB,EACrB,MAA4C;IAE5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,0BAA0B;YAC7B,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,uBAAuB,CAAC;YACvE,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,qBAAqB;YACxB,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,wBAAwB,CAAC;YACxE,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,oBAAoB;YACvB,IAAI,GAAG,8BAA8B,OAAO,CAAC,EAAE,mBAAmB,CAAC;YACnE,IAAI,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM;QACR;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAqC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,2EAA2E;QAC3E,oCAAoC;QACpC,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,OAAO;QACL,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;QACrD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;KAChC,CAAC;AACJ,CAAC;AAWD,SAAgB,SAAS,CAAC,KAAqB;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,0BAA0B;YAC7B,OAAO,oBAAoB,CAAC;QAC9B,KAAK,qBAAqB;YACxB,OAAO,uBAAuB,CAAC;QACjC,KAAK,oBAAoB;YACvB,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CAAC,MAAkB,EAAE,KAAqB;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,WAAW;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAC1B,8BAA8B,OAAO,CAAC,EAAE,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAClG,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;AAC/G,CAAC"}

package/dist/phone-numbers.d.ts

@@ -0,0 +1,43 @@
+import type { FapiClient } from './fapi';
+/**
+ * Self-service phone numbers — a signed-in user adds, verifies (texted code),
+ * picks a primary and removes their OWN numbers over `/v1/client/me/phone_numbers`.
+ * Cookie-authenticated through the {@link FapiClient}.
+ *
+ * Adding a number from a session that has not re-authenticated recently, and
+ * making one primary or removing one at any time after the step-up window,
+ * fails with a {@link PhoneNumberRequestError} whose `code` is
+ * `STEP_UP_REQUIRED`. Re-authenticate (`reauthenticate()`), then retry.
+ */
+export interface UserPhoneNumber {
+    object: 'phone_number';
+    id: string;
+    /** E.164. */
+    phone_number: string;
+    verified: boolean;
+    /** Where account SMS goes. Only a verified number can be primary. */
+    primary: boolean;
+    created_at?: number;
+}
+/** A refused request. `code` is the server's stable error code. */
+export declare class PhoneNumberRequestError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly param?: string;
+    readonly reason?: string;
+    constructor(status: number, code: string, message: string, param?: string, reason?: string);
+    /** True when the action needs a fresh re-authentication first. */
+    get needsReverification(): boolean;
+}
+/** The user's numbers, verified or not. */
+export declare function listPhoneNumbers(client: FapiClient): Promise<UserPhoneNumber[]>;
+/** Add a number (E.164, e.g. `+15551234567`); a verification code is texted to it. */
+export declare function addPhoneNumber(client: FapiClient, phoneNumber: string): Promise<UserPhoneNumber>;
+/** Text a fresh code to a number the user holds but has not verified. */
+export declare function preparePhoneNumberVerification(client: FapiClient, id: string): Promise<UserPhoneNumber>;
+/** Verify a number with the texted code. The first verified number becomes primary. */
+export declare function attemptPhoneNumberVerification(client: FapiClient, id: string, code: string): Promise<UserPhoneNumber>;
+/** Make a verified number primary. Needs a recent re-authentication. */
+export declare function setPrimaryPhoneNumber(client: FapiClient, id: string): Promise<UserPhoneNumber>;
+/** Remove a number. Needs a recent re-authentication; the last way to sign in is refused. */
+export declare function removePhoneNumber(client: FapiClient, id: string): Promise<void>;

package/dist/phone-numbers.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhoneNumberRequestError = void 0;
+exports.listPhoneNumbers = listPhoneNumbers;
+exports.addPhoneNumber = addPhoneNumber;
+exports.preparePhoneNumberVerification = preparePhoneNumberVerification;
+exports.attemptPhoneNumberVerification = attemptPhoneNumberVerification;
+exports.setPrimaryPhoneNumber = setPrimaryPhoneNumber;
+exports.removePhoneNumber = removePhoneNumber;
+/** A refused request. `code` is the server's stable error code. */
+class PhoneNumberRequestError extends Error {
+    code;
+    status;
+    param;
+    reason;
+    constructor(status, code, message, param, reason) {
+        super(message);
+        this.name = 'PhoneNumberRequestError';
+        this.status = status;
+        this.code = code;
+        this.param = param;
+        if (reason)
+            this.reason = reason;
+    }
+    /** True when the action needs a fresh re-authentication first. */
+    get needsReverification() {
+        return this.code === 'STEP_UP_REQUIRED';
+    }
+}
+exports.PhoneNumberRequestError = PhoneNumberRequestError;
+const BASE = '/v1/client/me/phone_numbers';
+async function call(client, path, init = {}) {
+    const res = await client.request(path, init);
+    if (!res.ok || !res.data) {
+        const first = res.errors[0];
+        throw new PhoneNumberRequestError(res.status, first?.code ?? 'UNKNOWN', first?.message ?? 'The request failed.', first?.param, first?.reason);
+    }
+    return res.data;
+}
+const json = (body) => ({ method: 'POST', body: JSON.stringify(body) });
+/** The user's numbers, verified or not. */
+async function listPhoneNumbers(client) {
+    return (await call(client, BASE, { method: 'GET' })).data ?? [];
+}
+/** Add a number (E.164, e.g. `+15551234567`); a verification code is texted to it. */
+function addPhoneNumber(client, phoneNumber) {
+    return call(client, BASE, json({ phone_number: phoneNumber }));
+}
+/** Text a fresh code to a number the user holds but has not verified. */
+function preparePhoneNumberVerification(client, id) {
+    return call(client, `${BASE}/${encodeURIComponent(id)}/prepare_verification`, { method: 'POST' });
+}
+/** Verify a number with the texted code. The first verified number becomes primary. */
+function attemptPhoneNumberVerification(client, id, code) {
+    return call(client, `${BASE}/${encodeURIComponent(id)}/attempt_verification`, json({ code }));
+}
+/** Make a verified number primary. Needs a recent re-authentication. */
+function setPrimaryPhoneNumber(client, id) {
+    return call(client, `${BASE}/${encodeURIComponent(id)}/primary`, { method: 'POST' });
+}
+/** Remove a number. Needs a recent re-authentication; the last way to sign in is refused. */
+async function removePhoneNumber(client, id) {
+    await call(client, `${BASE}/${encodeURIComponent(id)}`, { method: 'DELETE' });
+}
+//# sourceMappingURL=phone-numbers.js.map

package/dist/phone-numbers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-numbers.js","sourceRoot":"","sources":["../src/phone-numbers.ts"],"names":[],"mappings":";;;AAkEA,4CAEC;AAGD,wCAEC;AAGD,wEAEC;AAGD,wEAMC;AAGD,sDAEC;AAGD,8CAEC;AAzED,mEAAmE;AACnE,MAAa,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAS;IACb,MAAM,CAAS;IACf,KAAK,CAAU;IACf,MAAM,CAAU;IAEzB,YAAY,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,KAAc,EAAE,MAAe;QACxF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnC,CAAC;IAED,kEAAkE;IAClE,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC;IAC1C,CAAC;CACF;AAnBD,0DAmBC;AAED,MAAM,IAAI,GAAG,6BAA6B,CAAC;AAE3C,KAAK,UAAU,IAAI,CAAI,MAAkB,EAAE,IAAY,EAAE,OAAoB,EAAE;IAC7E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,GAAG,CAAC,MAAM,EACV,KAAK,EAAE,IAAI,IAAI,SAAS,EACxB,KAAK,EAAE,OAAO,IAAI,qBAAqB,EACvC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,CACd,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAa,EAAe,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE9F,2CAA2C;AACpC,KAAK,UAAU,gBAAgB,CAAC,MAAkB;IACvD,OAAO,CAAC,MAAM,IAAI,CAA8B,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,sFAAsF;AACtF,SAAgB,cAAc,CAAC,MAAkB,EAAE,WAAmB;IACpE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,yEAAyE;AACzE,SAAgB,8BAA8B,CAAC,MAAkB,EAAE,EAAU;IAC3E,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,uFAAuF;AACvF,SAAgB,8BAA8B,CAC5C,MAAkB,EAClB,EAAU,EACV,IAAY;IAEZ,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,uBAAuB,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,wEAAwE;AACxE,SAAgB,qBAAqB,CAAC,MAAkB,EAAE,EAAU;IAClE,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,6FAA6F;AACtF,KAAK,UAAU,iBAAiB,CAAC,MAAkB,EAAE,EAAU;IACpE,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/profile.d.ts

@@ -0,0 +1,24 @@
+import type { FapiClient } from './fapi';
+import type { FieldError } from './attempt';
+/**
+ * Update the signed-in user's own profile (`PATCH /v1/client/me`). `traits`
+ * sets identity traits the application marked user-editable — each is typed
+ * and checked by the server against the trait schema (a refused value comes
+ * back as an error whose `param` is `traits.<key>`); `null` removes an optional
+ * one. Cookie-authenticated through the {@link FapiClient}.
+ */
+export interface ProfileUpdate {
+    firstName?: string;
+    lastName?: string;
+    username?: string;
+    locale?: string;
+    unsafeMetadata?: Record<string, unknown>;
+    traits?: Record<string, unknown>;
+}
+export declare function updateProfile(client: FapiClient, update: ProfileUpdate): Promise<{
+    ok: true;
+    user: Record<string, unknown>;
+} | {
+    ok: false;
+    errors: FieldError[];
+}>;

package/dist/profile.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateProfile = updateProfile;
+async function updateProfile(client, update) {
+    const body = {};
+    if (update.firstName !== undefined)
+        body.first_name = update.firstName;
+    if (update.lastName !== undefined)
+        body.last_name = update.lastName;
+    if (update.username !== undefined)
+        body.username = update.username;
+    if (update.locale !== undefined)
+        body.locale = update.locale;
+    if (update.unsafeMetadata !== undefined)
+        body.unsafe_metadata = update.unsafeMetadata;
+    if (update.traits !== undefined)
+        body.traits = update.traits;
+    const response = await client.request('/v1/client/me', {
+        method: 'PATCH',
+        body: JSON.stringify(body),
+    });
+    return response.ok && response.data ? { ok: true, user: response.data } : { ok: false, errors: response.errors };
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":";;AAmBA,sCAgBC;AAhBM,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,MAAqB;IAErB,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAA0B,eAAe,EAAE;QAC9E,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnH,CAAC"}

package/dist/referral-detect.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Referral sources and consent managers the SDK recognises on the page, so
+ * referral capture works with any referral program and any consent manager.
+ *
+ * Sources: the referral script or cookie a program puts on the merchant's
+ * site. Each reader returns `{code, clickId, anonId}` (and `capturedAt` when
+ * the source says when): the code is the referrer's, the ids are the
+ * visitor's (sent only with consent). The instance lists which sources to read
+ * (`browser_sources`), so one program's script never feeds another program's
+ * connection. A custom program passes its own reader as `referralSource`.
+ *
+ * Consent: the first consent manager found on the page decides whether the
+ * referral cookie's ids may be read, for the instance's consent category, else
+ * its fallback category. The visitor's answer in a consent manager is the
+ * source of truth: the app's own decision (`referralConsent`) applies only
+ * when no manager is on the page, or when the instance says the app decides
+ * (`consent_provider: 'app'`). Common names map onto each manager's own:
+ * `marketing` (also advertising / targeting), `statistics` (analytics /
+ * performance) and `preferences` (functional / personalization); any other
+ * name is looked up as the manager's own category id. IAB TCF v2 managers
+ * answer with Purpose 1 (store and access information on a device).
+ *
+ * Every reader is defensive: a missing, half-loaded or throwing script reads
+ * as "nothing here". The ES5 copy in the Atlas API (hosted pages and the Sign
+ * in with Atlas button) follows the same rules and is tested against the same
+ * fixtures.
+ */
+/** What a browser source holds. */
+export interface DetectedReferral {
+    /** The source id (e.g. `rewardful`), or `custom` for the app's own reader. */
+    source: string;
+    code: string | null;
+    clickId: string | null;
+    anonId: string | null;
+    /** ISO 8601, when the source says when it captured the referral. */
+    capturedAt?: string;
+}
+/** The app's own reader, for a referral program the SDK doesn't know. */
+export type ReferralSourceReader = () => {
+    code?: string | null;
+    clickId?: string | null;
+    anonId?: string | null;
+    capturedAt?: string | number | null;
+} | null | undefined;
+/** The browser sources the SDK reads, in the order it tries them. */
+export declare const REFERRAL_BROWSER_SOURCES: readonly ["referally", "rewardful", "tolt", "promotekit", "firstpromoter", "partnerstack", "dub"];
+export type ReferralBrowserSource = (typeof REFERRAL_BROWSER_SOURCES)[number];
+/** The consent managers the SDK reads, in the order `auto` tries them. */
+export declare const CONSENT_PROVIDERS: readonly ["cookiemunch", "onetrust", "cookiebot", "didomi", "usercentrics", "osano", "cookieyes", "complianz", "klaro", "tcf", "consent_mode"];
+export type ConsentProvider = (typeof CONSENT_PROVIDERS)[number];
+/** The page as the readers see it: `window`, and `document.cookie`. */
+export interface DetectPage {
+    win: unknown;
+    cookies: string | null | undefined;
+}
+/** The app's own reader, as a detected referral (source `custom`). Never throws. */
+export declare function customReferral(reader: ReferralSourceReader | undefined): DetectedReferral | null;
+/** The first of `sources` with a referral on the page, or null. Unknown ids are skipped. */
+export declare function detectReferralSource(page: DetectPage, sources: readonly string[]): DetectedReferral | null;
+type Canonical = 'necessary' | 'preferences' | 'statistics' | 'marketing';
+/** A consent category's common meaning, if it has one. */
+export declare function canonicalCategory(name: string): Canonical | null;
+/**
+ * Start listening to an IAB TCF v2 manager (`__tcfapi`), so its answer is
+ * ready synchronously when a sign-in starts. Safe to call more than once.
+ */
+export declare function listenForTcfConsent(win: unknown): void;
+/** Forget the cached TCF data (tests). */
+export declare function resetConsentDetection(): void;
+/** A consent decision and who made it (`app`, a manager id, or `none`). */
+export interface ConsentDecision {
+    granted: boolean;
+    by: string;
+}
+/** The app's own decision (`referralConsent`), when definite. */
+export type AppConsent = 'granted' | 'denied' | boolean | (() => 'granted' | 'denied' | boolean | null | undefined);
+/**
+ * Whether the referral cookie's ids may be read, and who decided. A consent
+ * manager on the page decides (`provider`: `auto` tries each in order, a
+ * manager id asks only that one); a manager that doesn't know either category
+ * answers no. With no manager, or `provider: 'app'`, the app's definite answer
+ * decides; else no.
+ */
+export declare function detectConsent(win: unknown, categories: readonly (string | null | undefined)[], options?: {
+    provider?: string | null;
+    appConsent?: AppConsent;
+}): ConsentDecision;
+/** Which consent manager is on the page (`auto` order), or null. For diagnostics. */
+export declare function detectConsentProvider(win: unknown): ConsentProvider | null;
+export {};