@baliola/auth-sdk 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,44 @@
 
 All notable changes to `@baliola/auth-sdk` are documented here.
 
+## 0.5.0
+
+- feat(types): `auth.getProfile()` now returns `account.hasPassword`, a boolean
+  that is `true` when the account can sign in with a password and `false` for
+  Google-only or code-only accounts. Use it to decide between
+  `emailPassword.setPassword` and `emailPassword.changePassword`. `ProfileResult.account`
+  is typed as the new exported `ProfileAccount` (`Account & { hasPassword }`);
+  `Account` itself is unchanged. Requires baliola-auth with `hasPassword` on
+  `GET /profile`.
+- feat(client): `auth.google.login` accepts `{ code }` in addition to
+  `{ idToken }`. `code` is the authorization code from Google's OAuth popup
+  code flow (`google.accounts.oauth2.initCodeClient`, `ux_mode: 'popup'`), which
+  the server exchanges for the ID token with its client secret.
+  `LoginWithGoogleInput` is now `{ idToken: string } | { code: string }`. The
+  server answers `invalid_google_code` (401) when the exchange fails and
+  `google_code_unsupported` (400) when it has no client secret configured; both
+  surface as `AuthError` with `code` preserved.
+- types: `Profile`, `ProfileAccount`, and `ProfileResult` are now also exported
+  from the `./types` subpath, matching the root entry.
+
+## 0.4.1
+
+- chore(sdk): internal cleanup, no public API change. Removed dead code (the
+  unused `bearer-only-passthrough` auth-header mode, the throw-only
+  `refreshResponseShape` type helper, and the redundant `stripUndefined` body
+  helper, since the transport already drops `undefined` keys via
+  `JSON.stringify`), narrowed the internal request method union to the verbs
+  actually used (GET / POST), and deduplicated internal wire types against the
+  public `RegisterResult` / `ResendCodeResult`.
+- chore(packaging): `viem` is now declared an **optional** peer dependency
+  (`peerDependenciesMeta`). It is only needed by the `./wallet` subpath, so
+  consumers who never import a wallet no longer have it auto-installed by npm 7+
+  and no longer see a missing-peer warning. Wallet users must install `viem`
+  themselves, which the wallet setup already required.
+- Repo: this package moved out of the `baliola-auth` backend monorepo into its
+  own repository at `baliola/baliola-auth-sdk`. Package name, npm scope, and
+  every import path are unchanged.
+
 ## 0.4.0
 
 - feat(sdk): add `auth.getProfile()` → `GET /profile`. Returns `{ account, profile }` where `account` carries the **live** account status (read from the database, not the token) and `profile` is the account's profile record (`displayName`, `avatarUrl`, `primaryEmail`, `primaryPhone`) or `null` when none exists yet. New exported types: `Profile`, `ProfileResult`.
@@ -9,17 +47,17 @@ All notable changes to `@baliola/auth-sdk` are documented here.
 
 ## 0.3.0
 
-- feat(sdk): add the custodial wallet namespace — `auth.wallet.getAddress()` (`GET /auth/wallet`, provisioned on first read) and `auth.wallet.signHash(hash)` (`POST /auth/wallet/sign`).
-- feat(sdk): add `createRemoteSigner` under the `./wallet` subpath — a viem-compatible account whose `signMessage({ raw })` delegates to `POST /auth/wallet/sign`, so the custodial private key never leaves baliola-auth.
+- feat(sdk): add the custodial wallet namespace: `auth.wallet.getAddress()` (`GET /auth/wallet`, provisioned on first read) and `auth.wallet.signHash(hash)` (`POST /auth/wallet/sign`).
+- feat(sdk): add `createRemoteSigner` under the `./wallet` subpath, a viem-compatible account whose `signMessage({ raw })` delegates to `POST /auth/wallet/sign`, so the custodial private key never leaves baliola-auth.
 
 ## 0.2.0
 
 Distribution change and clean-ups; no method-level API changes.
 
-- chore(release): publish to **public npm** (`https://registry.npmjs.org`) instead of GitHub Packages. Installing no longer requires a Personal Access Token, an `.npmrc` registry override, or SSO authorization — plain `bun add @baliola/auth-sdk` works in every environment.
+- chore(release): publish to **public npm** (`https://registry.npmjs.org`) instead of GitHub Packages. Installing no longer requires a Personal Access Token, an `.npmrc` registry override, or SSO authorization. Plain `bun add @baliola/auth-sdk` works in every environment.
 - docs: rewrite `README.md`, `docs/install.md`, `docs/ciSetup.md`, and `docs/troubleshooting.md` to reflect public-npm install. CI snippets no longer need build secrets.
 - Consumers previously installing from GitHub Packages should remove any `@baliola:registry=https://npm.pkg.github.com` entries from `~/.npmrc` and project-local `.npmrc` files before upgrading.
-- fix(types): realign `AccessTokenPayload` with the server's current JWT shape. The flat `projectId?: string | null` / `projectName?: string | null` pair is replaced by `projects: AccessTokenPayloadProject[]` (each entry carries `{ id, name, clientId }`). Type-only change — affects consumers that decode the JWT manually and reference this type. A scoped login (`clientId` supplied) yields a single-entry array; a central login yields every project the account has active roles in.
+- fix(types): realign `AccessTokenPayload` with the server's current JWT shape. The flat `projectId?: string | null` / `projectName?: string | null` pair is replaced by `projects: AccessTokenPayloadProject[]` (each entry carries `{ id, name, clientId }`). Type-only change, affecting consumers that decode the JWT manually and reference this type. A scoped login (`clientId` supplied) yields a single-entry array; a central login yields every project the account has active roles in.
 - chore!: remove the `./internal` subpath export and the `internal/` source folder (`createValidateCache`, `newIdempotencyKey`, `consumeHeaders`). Those helpers targeted the retired `/internal/api-keys/*` endpoints and the static "internal token" concept. Service-to-service callers now authenticate with an admin-tier API key (`baliola_admin_…`) against `/admin/api-keys/*`; cache + idempotency helpers for that surface will ship in a dedicated admin SDK.
 
 ## 0.1.0
@@ -28,7 +66,7 @@ Breaking redesign of the auth API and SDK surface to eliminate dev confusion bet
 
 ### Breaking changes
 
-- feat(sdk)!: replace the flat method surface with namespaced flows — `auth.emailOtp.*`, `auth.emailPassword.*`, `auth.google.*`. The namespaces match the DB provider names (`email_otp`, `email_password`).
+- feat(sdk)!: replace the flat method surface with namespaced flows: `auth.emailOtp.*`, `auth.emailPassword.*`, `auth.google.*`. The namespaces match the DB provider names (`email_otp`, `email_password`).
 - feat(sdk)!: rename verb-overloaded methods so each one's purpose is unambiguous at the call site:
   - `auth.requestEmailOtp` → `auth.emailOtp.sendLoginCode`
   - `auth.verifyEmailOtp` → `auth.emailOtp.verifyLoginCode`
@@ -39,14 +77,14 @@ Breaking redesign of the auth API and SDK surface to eliminate dev confusion bet
   - `auth.changePassword` → `auth.emailPassword.changePassword`
   - `auth.loginWithGoogle` → `auth.google.login`
 - feat(sdk)!: verify-code methods take `{ email, code }` instead of `{ email, otp }`.
-- feat(sdk)!: `auth.emailPassword.register` no longer branches on `'otp_sent' | 'linked'` — it always sends a verification OTP and returns `{ otp: OtpInfo }`. The single-step "linked" path is removed.
-- feat(sdk)!: send/resend/register success responses replace `expiresInMinutes` with a structured `OtpInfo` payload — `expiresInSeconds`, `expiresAt`, `canResendInSeconds`, `resendsRemaining`.
+- feat(sdk)!: `auth.emailPassword.register` no longer branches on `'otp_sent' | 'linked'`. It always sends a verification OTP and returns `{ otp: OtpInfo }`. The single-step "linked" path is removed.
+- feat(sdk)!: send/resend/register success responses replace `expiresInMinutes` with a structured `OtpInfo` payload: `expiresInSeconds`, `expiresAt`, `canResendInSeconds`, `resendsRemaining`.
 - feat(sdk)!: backend endpoint paths renamed to match the namespaces: `POST /auth/email-otp/send-login-code`, `/auth/email-otp/verify-login-code`, `/auth/email-otp/resend-login-code`, `/auth/email-password/register`, `/auth/email-password/verify-registration-code`, `/auth/email-password/resend-registration-code`, etc.
 
 ### New features
 
-- feat(sdk): add typed error subclasses under `AuthError` — `OtpInvalidError` (with `attemptsRemaining`, `canResendInSeconds`), `OtpExpiredError`, `MaxAttemptsError` (with `retryAfterSeconds`), `NoPendingOtpError`, `ResendCooldownError` (with `canResendInSeconds`), `MaxResendsError`, `InvalidCredentialsError`, `NoPasswordSetError`, `AccountSuspendedError`, `EmailAlreadyHasPasswordError`, `CaptchaFailedError`, `RateLimitedError` (with `retryAfterSeconds`, `retryAfterHuman`), `InvalidPasswordError` (with `reason`), `InvalidEmailError`. Branch on `instanceof` for TS narrowing, or `err.code` for stable string matching. Backend responses now carry the structured context fields via `error.details` so the SDK lifts them into the typed properties.
-- feat(sdk): add dedicated resend methods — `auth.emailOtp.resendLoginCode` and `auth.emailPassword.resendRegistrationCode`. Each enforces its own resend cooldown (`OTP_RESEND_COOLDOWN_SECONDS`, default 60s) and per-OTP cap (`OTP_MAX_RESENDS`, default 3) on top of the per-OTP attempts limit.
+- feat(sdk): add typed error subclasses under `AuthError`: `OtpInvalidError` (with `attemptsRemaining`, `canResendInSeconds`), `OtpExpiredError`, `MaxAttemptsError` (with `retryAfterSeconds`), `NoPendingOtpError`, `ResendCooldownError` (with `canResendInSeconds`), `MaxResendsError`, `InvalidCredentialsError`, `NoPasswordSetError`, `AccountSuspendedError`, `EmailAlreadyHasPasswordError`, `CaptchaFailedError`, `RateLimitedError` (with `retryAfterSeconds`, `retryAfterHuman`), `InvalidPasswordError` (with `reason`), `InvalidEmailError`. Branch on `instanceof` for TS narrowing, or `err.code` for stable string matching. Backend responses now carry the structured context fields via `error.details` so the SDK lifts them into the typed properties.
+- feat(sdk): add dedicated resend methods: `auth.emailOtp.resendLoginCode` and `auth.emailPassword.resendRegistrationCode`. Each enforces its own resend cooldown (`OTP_RESEND_COOLDOWN_SECONDS`, default 60s) and per-OTP cap (`OTP_MAX_RESENDS`, default 3) on top of the per-OTP attempts limit.
 - feat(sdk): add `captchaToken` option on every public unauthenticated entrypoint (`sendLoginCode`, `resendLoginCode`, `register`, `resendRegistrationCode`, `login`). Backend verifies via Cloudflare Turnstile when `TURNSTILE_SECRET_KEY` is set; dev bypass when unset; server-to-server clients can be allowlisted via `CAPTCHA_BYPASS_CLIENT_IDS`.
 - feat(sdk): `auth.emailOtp.sendLoginCode` response includes `flow: 'login' | 'signup'` and `methods: ('password' | 'passwordless')[]` so the UI can adapt to the account state without an extra round-trip.
 
@@ -57,30 +95,29 @@ Breaking redesign of the auth API and SDK surface to eliminate dev confusion bet
 
 ## 0.0.5
 
-- feat(sdk): add cross-tab session sync via `BroadcastChannel` — when one tab logs in, logs out, or refreshes the access token, every other tab on the same origin updates its in-memory mirror in real time.
+- feat(sdk): add cross-tab session sync via `BroadcastChannel`. When one tab logs in, logs out, or refreshes the access token, every other tab on the same origin updates its in-memory mirror in real time.
 - feat(sdk): add `auth.fetch({ requireAuth: true })` per-call option that throws `AuthError(401)` before sending when no session is loaded.
 - feat(sdk): add `auth.fetch({ disableRefresh: true })` per-call option that skips both proactive and reactive refresh, letting a 401 propagate to the caller.
 
 ## 0.0.4
 
-- feat(sdk): add `changePassword({ currentPassword, newPassword })` paired with `POST /auth/email-password/change-password` server route — verifies the current password, rotates the bcrypt hash, revokes every other session for the account (caller stays signed in), and sends a confirmation email out-of-band.
+- feat(sdk): add `changePassword({ currentPassword, newPassword })` paired with `POST /auth/email-password/change-password` server route. It verifies the current password, rotates the bcrypt hash, revokes every other session for the account (caller stays signed in), and sends a confirmation email out-of-band.
 - chore(auth): relax password policy to require only 8+ characters and at least one uppercase letter (number and special-character requirements dropped).
 
 ## 0.0.3
 
-- chore(sdk): bump version to 0.0.3
-- feat(sdk): expose `Project.allowedOrigins` on `AuthSession`
+- feat(sdk): expose `Project.allowedOrigins` on `AuthSession`, so a consumer can read the origins a project accepts without a second call.
 
 ## 0.0.2
 
-- chore(sdk): bump version to 0.0.2
-- refactor(sdk): drop pre-release version labels from public JSDoc
-- docs(sdk): inline install in README and move roadmap to ROADMAP.md
-- docs(sdk): add user install, troubleshooting, and CI setup guides
-- docs(sdk): add README with usage and configuration reference
-- test(sdk): add unit tests for client, transport, and store
-- feat(sdk): implement auth client with auto-refresh, session mirror, and consumer fetch helper
+The first usable release. 0.0.1 published the package shell; this one puts a working client inside it.
+
+- feat(sdk): implement the auth client, with proactive and reactive access-token refresh, the in-memory session mirror, and the `auth.fetch` helper that attaches the access token for consumers.
+- refactor(sdk): drop pre-release version labels from public JSDoc, so published docs no longer advertise a version that moves every release.
+- docs(sdk): add the README API reference plus the install, troubleshooting, and CI setup guides, and move the roadmap out to `ROADMAP.md`.
 
 ## 0.0.1
 
-- feat(sdk): scaffold `@baliola/auth-sdk` package config
+- feat(sdk): scaffold the `@baliola/auth-sdk` package config. Package shell and build only, no client implementation yet.
+
+These 0.0.x releases went to GitHub Packages, not public npm. 0.2.0 moved distribution to public npm, and nothing below 0.2.0 is installable from the public registry.

package/README.md

@@ -2,7 +2,12 @@
 
 Client SDK for the Baliola Auth service. Two clearly separated email flows (passwordless OTP, password + verification OTP) plus Google login, with typed methods, typed errors, auto-refresh, and cross-tab sync.
 
-For deeper detail see [docs/concepts.md](./docs/concepts.md).
+Guides:
+
+- [docs/concepts.md](./docs/concepts.md): flows, session mirror, refresh, cross-tab sync, errors.
+- [docs/install.md](./docs/install.md): install and first call.
+- [docs/ciSetup.md](./docs/ciSetup.md): installing this SDK in your own pipeline.
+- [docs/troubleshooting.md](./docs/troubleshooting.md): install and build symptoms.
 
 ## Install
 
@@ -18,11 +23,14 @@ Published to public npm under the `@baliola` scope — no registry config or aut
 
 ## Quick start
 
+`AUTH_URL` below is the base URL of the Baliola Auth deployment you are targeting. It differs per
+environment. Baliola developers: the per-environment values are in the internal integration docs.
+
 ```ts
 import { createAuthClient, localStorageStore, OtpInvalidError } from '@baliola/auth-sdk';
 
 const auth = createAuthClient({
-  baseUrl: 'https://baliola-auth.baliola.dev',
+  baseUrl: AUTH_URL,
   clientId: 'your-project-client-id', // omit for a central multi-project login
   store: localStorageStore(), // omit for in-memory (server-side / tests)
 });
@@ -91,8 +99,12 @@ auth.emailPassword.changePassword({ currentPassword, newPassword });
 ### `auth.google`
 
 ```ts
-// idToken is obtained from Google Sign-In on the frontend.
+// idToken comes from the Google Identity Services button or One Tap.
 auth.google.login({ idToken }); // → AuthSession
+
+// code comes from the OAuth popup code flow (google.accounts.oauth2.initCodeClient).
+// The server exchanges it for the ID token with its client secret.
+auth.google.login({ code }); // → AuthSession
 ```
 
 ### Custodial wallet (smart-account signer)
@@ -115,8 +127,10 @@ The private key never leaves baliola-auth; `owner.signMessage({ raw })` calls `P
 
 ```ts
 const { account, profile } = await auth.getProfile(); // GET /profile (authenticated)
-// account = { id, email, status }   — status is live, not a token-time snapshot
+// account = { id, email, status, hasPassword }   (status is live, not a token-time snapshot)
 // profile = { displayName, avatarUrl, primaryEmail, primaryPhone } | null
+
+// hasPassword is false for Google-only or code-only accounts: offer setPassword, not changePassword.
 ```
 
 ### Session lifecycle
@@ -234,7 +248,7 @@ Cross-tab sync (login / logout / refresh) is automatic via `BroadcastChannel`, r
 
 ```ts
 createAuthClient({
-  baseUrl: 'https://baliola-auth.baliola.dev', // required, no trailing slash
+  baseUrl: AUTH_URL, // required, no trailing slash
   clientId: 'your-project-client-id', // optional; scopes the session to one project. Omit for a central login that carries every project the account has active roles in.
   store: memoryStore(), // default; or localStorageStore() / custom
   fetch: globalThis.fetch, // override for tests / interceptors
@@ -263,6 +277,8 @@ if (session) {
 }
 ```
 
+`decodeJwt` reads claims without checking the signature, which is fine on the client where the token came from your own session. A service that trusts the token for authorization must verify it: the tokens are EdDSA (Ed25519), issuer `baliola-auth`, and the public keys are served at `GET /.well-known/jwks.json` on the same `baseUrl`.
+
 ## Sample response shapes
 
 **`auth.emailOtp.sendLoginCode` success:**
@@ -297,7 +313,7 @@ if (session) {
 
 ```json
 {
-  "accessToken": "eyJhbGciOiJIUzI1NiIs...",
+  "accessToken": "eyJhbGciOiJFZERTQSIs...",
   "refreshToken": "session-uuid",
   "expiresIn": 3600,
   "account": { "id": "...", "email": "user@example.com", "status": "active" },
@@ -307,6 +323,15 @@ if (session) {
 }
 ```
 
+**`auth.getProfile` success (`ProfileResult`):**
+
+```json
+{
+  "account": { "id": "...", "email": "user@example.com", "status": "active", "hasPassword": true },
+  "profile": { "displayName": "Ada", "avatarUrl": null, "primaryEmail": "user@example.com", "primaryPhone": null }
+}
+```
+
 **Verify-code failure (e.g. `OtpInvalidError`):**
 
 ```json

package/dist/{authError-DbEZJnC4.js → authError-CYUAl2Jt.js}

@@ -32,6 +32,7 @@ var AuthError = class extends Error {
 		Object.setPrototypeOf(this, new.target.prototype);
 	}
 };
+/** Concrete subclasses with structured fields lifted from `details` */
 var OtpInvalidError = class extends AuthError {
 	attemptsRemaining;
 	canResendInSeconds;

package/dist/{authError-C5g5jP5l.d.ts → authError-DgPEjTfW.d.ts}

@@ -30,6 +30,7 @@ declare class AuthError extends Error {
   readonly cause?: unknown;
   constructor(init: AuthErrorInit);
 }
+/** Concrete subclasses with structured fields lifted from `details` */
 declare class OtpInvalidError extends AuthError {
   readonly attemptsRemaining: number;
   readonly canResendInSeconds: number;

package/dist/client/index.d.ts

@@ -1,2 +1,2 @@
-import { a as GoogleNamespace, c as WalletNamespace, f as AuthFetchInit, i as EmailPasswordNamespace, l as createAuthClient, n as CreateAuthClientOptions, o as ProactiveRefreshConfig, r as EmailOtpNamespace, s as SubscribeOptions, t as AuthClient } from "../index-B2RuGLX_.js";
+import { a as GoogleNamespace, c as WalletNamespace, i as EmailPasswordNamespace, l as createAuthClient, n as CreateAuthClientOptions, o as ProactiveRefreshConfig, r as EmailOtpNamespace, s as SubscribeOptions, t as AuthClient, u as AuthFetchInit } from "../index-URk8yf8l.js";
 export { AuthClient, AuthFetchInit, CreateAuthClientOptions, EmailOtpNamespace, EmailPasswordNamespace, GoogleNamespace, ProactiveRefreshConfig, SubscribeOptions, WalletNamespace, createAuthClient };

package/dist/client/index.js

@@ -1,2 +1,2 @@
-import { t as createAuthClient } from "../client-CX3XFmOA.js";
+import { t as createAuthClient } from "../client-DxhQkQcE.js";
 export { createAuthClient };

package/dist/{client-CX3XFmOA.js → client-DxhQkQcE.js}

@@ -1,4 +1,4 @@
-import { _ as authErrorFromResponse, g as authErrorFromFetchFailure, n as AuthError } from "./authError-DbEZJnC4.js";
+import { _ as authErrorFromResponse, g as authErrorFromFetchFailure, n as AuthError } from "./authError-CYUAl2Jt.js";
 import { n as memoryStore } from "./sessionStore-DD6lON9W.js";
 //#region src/client/methods.ts
 function toAuthSession(data) {
@@ -23,21 +23,17 @@ function createMethods(ctx) {
 			clientId: ctx.clientId
 		};
 	};
-	const stripUndefined = (body) => {
-		const out = {};
-		for (const [k, v] of Object.entries(body)) if (v !== void 0) out[k] = v;
-		return out;
-	};
 	return {
+		/** emailOtp.* (passwordless) */
 		async sendLoginCode(input) {
 			return ctx.transport.request({
 				path: "/auth/email-otp/send-login-code",
 				method: "POST",
 				authMode: "none",
-				body: stripUndefined(withClientId({
+				body: withClientId({
 					email: input.email,
 					captchaToken: input.captchaToken
-				}))
+				})
 			});
 		},
 		async verifyLoginCode(input) {
@@ -56,22 +52,23 @@ function createMethods(ctx) {
 				path: "/auth/email-otp/resend-login-code",
 				method: "POST",
 				authMode: "none",
-				body: stripUndefined(withClientId({
+				body: withClientId({
 					email: input.email,
 					captchaToken: input.captchaToken
-				}))
+				})
 			});
 		},
+		/** emailPassword.* (password flow) */
 		async register(input) {
 			return ctx.transport.request({
 				path: "/auth/email-password/register",
 				method: "POST",
 				authMode: "none",
-				body: stripUndefined(withClientId({
+				body: withClientId({
 					email: input.email,
 					password: input.password,
 					captchaToken: input.captchaToken
-				}))
+				})
 			});
 		},
 		async verifyRegistrationCode(input) {
@@ -90,10 +87,10 @@ function createMethods(ctx) {
 				path: "/auth/email-password/resend-registration-code",
 				method: "POST",
 				authMode: "none",
-				body: stripUndefined(withClientId({
+				body: withClientId({
 					email: input.email,
 					captchaToken: input.captchaToken
-				}))
+				})
 			});
 		},
 		async loginWithPassword(input) {
@@ -101,11 +98,11 @@ function createMethods(ctx) {
 				path: "/auth/email-password/login",
 				method: "POST",
 				authMode: "none",
-				body: stripUndefined(withClientId({
+				body: withClientId({
 					email: input.email,
 					password: input.password,
 					captchaToken: input.captchaToken
-				}))
+				})
 			}));
 		},
 		async setPassword(input) {
@@ -127,14 +124,16 @@ function createMethods(ctx) {
 				}
 			});
 		},
+		/** google.* */
 		async loginWithGoogle(input) {
 			return toAuthSession(await ctx.transport.request({
 				path: "/auth/google/login",
 				method: "POST",
 				authMode: "none",
-				body: withClientId({ idToken: input.idToken })
+				body: withClientId("idToken" in input ? { idToken: input.idToken } : { code: input.code })
 			}));
 		},
+		/** wallet.* */
 		async getWalletAddress() {
 			return ctx.transport.request({
 				path: "/auth/wallet",
@@ -150,6 +149,7 @@ function createMethods(ctx) {
 				body: { hash }
 			});
 		},
+		/** profile */
 		async getProfile() {
 			return ctx.transport.request({
 				path: "/profile",
@@ -157,20 +157,13 @@ function createMethods(ctx) {
 				authMode: "bearer+session"
 			});
 		},
+		/** session lifecycle */
 		async logoutRequest() {
 			await ctx.transport.request({
 				path: "/auth/logout",
 				method: "POST",
 				authMode: "bearer+session"
 			});
-		},
-		/**
-		* Type-only helper: declares the refresh response shape so consumers
-		* pulling the inferred Methods type don't break. Refresh itself is
-		* handled by transport.refreshSession() to keep stampede protection.
-		*/
-		refreshResponseShape() {
-			throw new Error("refreshResponseShape is a type-only helper");
 		}
 	};
 }
@@ -202,9 +195,6 @@ function createTransport(options) {
 			case "session-only":
 				headers.set("X-Session-ID", session.refreshToken);
 				break;
-			case "bearer-only-passthrough":
-				headers.set("Authorization", `Bearer ${session.accessToken}`);
-				break;
 			case "none": break;
 		}
 		return headers;

package/dist/errors/index.d.ts

@@ -1,2 +1,2 @@
-import { _ as authErrorFromFetchFailure, a as EmailAlreadyHasPasswordError, c as InvalidPasswordError, d as NoPasswordSetError, f as NoPendingOtpError, g as ResendCooldownError, h as RateLimitedError, i as CaptchaFailedError, l as MaxAttemptsError, m as OtpInvalidError, n as AuthError, o as InvalidCredentialsError, p as OtpExpiredError, r as AuthErrorInit, s as InvalidEmailError, t as AccountSuspendedError, u as MaxResendsError, v as authErrorFromResponse } from "../authError-C5g5jP5l.js";
+import { _ as authErrorFromFetchFailure, a as EmailAlreadyHasPasswordError, c as InvalidPasswordError, d as NoPasswordSetError, f as NoPendingOtpError, g as ResendCooldownError, h as RateLimitedError, i as CaptchaFailedError, l as MaxAttemptsError, m as OtpInvalidError, n as AuthError, o as InvalidCredentialsError, p as OtpExpiredError, r as AuthErrorInit, s as InvalidEmailError, t as AccountSuspendedError, u as MaxResendsError, v as authErrorFromResponse } from "../authError-DgPEjTfW.js";
 export { AccountSuspendedError, AuthError, type AuthErrorInit, CaptchaFailedError, EmailAlreadyHasPasswordError, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, MaxAttemptsError, MaxResendsError, NoPasswordSetError, NoPendingOtpError, OtpExpiredError, OtpInvalidError, RateLimitedError, ResendCooldownError, authErrorFromFetchFailure, authErrorFromResponse };

package/dist/errors/index.js

@@ -1,2 +1,2 @@
-import { _ as authErrorFromResponse, a as InvalidCredentialsError, c as MaxAttemptsError, d as NoPendingOtpError, f as OtpExpiredError, g as authErrorFromFetchFailure, h as ResendCooldownError, i as EmailAlreadyHasPasswordError, l as MaxResendsError, m as RateLimitedError, n as AuthError, o as InvalidEmailError, p as OtpInvalidError, r as CaptchaFailedError, s as InvalidPasswordError, t as AccountSuspendedError, u as NoPasswordSetError } from "../authError-DbEZJnC4.js";
+import { _ as authErrorFromResponse, a as InvalidCredentialsError, c as MaxAttemptsError, d as NoPendingOtpError, f as OtpExpiredError, g as authErrorFromFetchFailure, h as ResendCooldownError, i as EmailAlreadyHasPasswordError, l as MaxResendsError, m as RateLimitedError, n as AuthError, o as InvalidEmailError, p as OtpInvalidError, r as CaptchaFailedError, s as InvalidPasswordError, t as AccountSuspendedError, u as NoPasswordSetError } from "../authError-CYUAl2Jt.js";
 export { AccountSuspendedError, AuthError, CaptchaFailedError, EmailAlreadyHasPasswordError, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, MaxAttemptsError, MaxResendsError, NoPasswordSetError, NoPendingOtpError, OtpExpiredError, OtpInvalidError, RateLimitedError, ResendCooldownError, authErrorFromFetchFailure, authErrorFromResponse };

package/dist/{index-B2RuGLX_.d.ts → index-URk8yf8l.d.ts}

@@ -1,6 +1,6 @@
-import { c as ResendCodeResult, l as SendLoginCodeResult, n as AuthSession, r as ErrorHandler, s as RegisterResult, t as Account, u as SessionChangeHandler } from "./session-Cs_P7ojF.js";
+import { c as ResendCodeResult, l as SendLoginCodeResult, n as AuthSession, r as ErrorHandler, s as RegisterResult, u as SessionChangeHandler } from "./session-Cs_P7ojF.js";
 import { n as SessionStore } from "./sessionStore-BDdEpbL8.js";
-import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, i as LoginWithPasswordInput, l as SetPasswordInput, n as ChangePasswordInput, o as ResendLoginCodeInput, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, u as VerifyLoginCodeInput } from "./requests-eTORIjY5.js";
+import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, i as LoginWithPasswordInput, l as SetPasswordInput, m as ProfileResult, n as ChangePasswordInput, o as ResendLoginCodeInput, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, u as VerifyLoginCodeInput } from "./requests-jRLgNXyf.js";
 
 //#region src/client/transport.d.ts
 type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
@@ -26,20 +26,6 @@ type AuthFetchInit = RequestInit & {
   disableRefresh?: boolean;
 };
 //#endregion
-//#region src/types/profile.d.ts
-/** The account's profile record; every field is user-editable and nullable. */
-type Profile = {
-  displayName: string | null;
-  avatarUrl: string | null;
-  primaryEmail: string | null;
-  primaryPhone: string | null;
-};
-/** Result of `auth.getProfile` — identity read for the token holder. */
-type ProfileResult = {
-  /** `status` is the live account status, not a token-time snapshot. */account: Account; /** `null` when the account has no profile row yet. */
-  profile: Profile | null;
-};
-//#endregion
 //#region src/client/index.d.ts
 type ProactiveRefreshConfig = false | {
   /** Refresh proactively if `expiresAt - now < leadTimeMs`. Defaults to 60_000 (60s). */leadTimeMs?: number;
@@ -131,6 +117,19 @@ type EmailPasswordNamespace = {
 };
 /** Google flow. */
 type GoogleNamespace = {
+  /**
+   * Sign in with Google. Pass `{ idToken }` from the Google Identity Services
+   * button or One Tap, or `{ code }` from the OAuth popup code flow
+   * (`google.accounts.oauth2.initCodeClient`), which the server exchanges
+   * for the ID token using its client secret.
+   *
+   * @throws AuthError with code `invalid_google_code` (401) when the exchange
+   *         fails, `google_code_unsupported` (400) when the server has no
+   *         client secret configured, AccountSuspendedError, AuthError.
+   * @example
+   * await auth.google.login({ idToken });
+   * await auth.google.login({ code });
+   */
   login(input: LoginWithGoogleInput): Promise<AuthSession>;
 };
 /** Custodial wallet (Console tier). */
@@ -144,8 +143,10 @@ type AuthClient = {
   google: GoogleNamespace;
   wallet: WalletNamespace;
   /**
-   * Fetch the token holder's identity: account (id, email, live status) plus
-   * its profile record (`profile: null` when none exists yet).
+   * Fetch the token holder's identity: account (id, email, live status,
+   * `hasPassword`) plus its profile record (`profile: null` when none exists
+   * yet). Use `account.hasPassword` to choose between
+   * `emailPassword.setPassword` and `emailPassword.changePassword`.
    *
    * @throws AuthError on 401 (missing/expired session) and other API errors.
    */
@@ -166,4 +167,4 @@ type AuthClient = {
 };
 declare function createAuthClient(options: CreateAuthClientOptions): AuthClient;
 //#endregion
-export { GoogleNamespace as a, WalletNamespace as c, ProfileResult as d, AuthFetchInit as f, EmailPasswordNamespace as i, createAuthClient as l, CreateAuthClientOptions as n, ProactiveRefreshConfig as o, EmailOtpNamespace as r, SubscribeOptions as s, AuthClient as t, Profile as u };
+export { GoogleNamespace as a, WalletNamespace as c, EmailPasswordNamespace as i, createAuthClient as l, CreateAuthClientOptions as n, ProactiveRefreshConfig as o, EmailOtpNamespace as r, SubscribeOptions as s, AuthClient as t, AuthFetchInit as u };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { a as OtpInfo, c as ResendCodeResult, i as ErrorSource, l as SendLoginCodeResult, n as AuthSession, o as Project, r as ErrorHandler, s as RegisterResult, t as Account, u as SessionChangeHandler } from "./session-Cs_P7ojF.js";
-import { a as GoogleNamespace, c as WalletNamespace, d as ProfileResult, f as AuthFetchInit, i as EmailPasswordNamespace, l as createAuthClient, n as CreateAuthClientOptions, o as ProactiveRefreshConfig, r as EmailOtpNamespace, s as SubscribeOptions, t as AuthClient, u as Profile } from "./index-B2RuGLX_.js";
+import { a as GoogleNamespace, c as WalletNamespace, i as EmailPasswordNamespace, l as createAuthClient, n as CreateAuthClientOptions, o as ProactiveRefreshConfig, r as EmailOtpNamespace, s as SubscribeOptions, t as AuthClient, u as AuthFetchInit } from "./index-URk8yf8l.js";
 import { i as memoryStore, n as SessionStore, r as localStorageStore, t as LocalStorageStoreOptions } from "./sessionStore-BDdEpbL8.js";
-import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, i as LoginWithPasswordInput, l as SetPasswordInput, n as ChangePasswordInput, o as ResendLoginCodeInput, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, t as CaptchaArgs, u as VerifyLoginCodeInput } from "./requests-eTORIjY5.js";
-import { _ as authErrorFromFetchFailure, a as EmailAlreadyHasPasswordError, c as InvalidPasswordError, d as NoPasswordSetError, f as NoPendingOtpError, g as ResendCooldownError, h as RateLimitedError, i as CaptchaFailedError, l as MaxAttemptsError, m as OtpInvalidError, n as AuthError, o as InvalidCredentialsError, p as OtpExpiredError, r as AuthErrorInit, s as InvalidEmailError, t as AccountSuspendedError, u as MaxResendsError, v as authErrorFromResponse } from "./authError-C5g5jP5l.js";
+import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, f as Profile, i as LoginWithPasswordInput, l as SetPasswordInput, m as ProfileResult, n as ChangePasswordInput, o as ResendLoginCodeInput, p as ProfileAccount, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, t as CaptchaArgs, u as VerifyLoginCodeInput } from "./requests-jRLgNXyf.js";
+import { _ as authErrorFromFetchFailure, a as EmailAlreadyHasPasswordError, c as InvalidPasswordError, d as NoPasswordSetError, f as NoPendingOtpError, g as ResendCooldownError, h as RateLimitedError, i as CaptchaFailedError, l as MaxAttemptsError, m as OtpInvalidError, n as AuthError, o as InvalidCredentialsError, p as OtpExpiredError, r as AuthErrorInit, s as InvalidEmailError, t as AccountSuspendedError, u as MaxResendsError, v as authErrorFromResponse } from "./authError-DgPEjTfW.js";
 import { n as AccessTokenPayloadProject, t as AccessTokenPayload } from "./tokens-BXrPLi5B.js";
 
 //#region src/types/wallet.d.ts
@@ -16,4 +16,4 @@ type SignHashResult = {
   address: string;
 };
 //#endregion
-export { type AccessTokenPayload, type AccessTokenPayloadProject, type Account, AccountSuspendedError, type AuthClient, AuthError, type AuthErrorInit, type AuthFetchInit, type AuthSession, type CaptchaArgs, CaptchaFailedError, type ChangePasswordInput, type CreateAuthClientOptions, EmailAlreadyHasPasswordError, type EmailOtpNamespace, type EmailPasswordNamespace, type ErrorHandler, type ErrorSource, type GoogleNamespace, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, type LocalStorageStoreOptions, type LoginWithGoogleInput, type LoginWithPasswordInput, MaxAttemptsError, MaxResendsError, NoPasswordSetError, NoPendingOtpError, OtpExpiredError, type OtpInfo, OtpInvalidError, type ProactiveRefreshConfig, type Profile, type ProfileResult, type Project, RateLimitedError, type RegisterInput, type RegisterResult, type ResendCodeResult, ResendCooldownError, type ResendLoginCodeInput, type ResendRegistrationCodeInput, type SendLoginCodeInput, type SendLoginCodeResult, type SessionChangeHandler, type SessionStore, type SetPasswordInput, type SignHashResult, type SubscribeOptions, type VerifyLoginCodeInput, type VerifyRegistrationCodeInput, type WalletAddressResult, type WalletNamespace, authErrorFromFetchFailure, authErrorFromResponse, createAuthClient, localStorageStore, memoryStore };
+export { type AccessTokenPayload, type AccessTokenPayloadProject, type Account, AccountSuspendedError, type AuthClient, AuthError, type AuthErrorInit, type AuthFetchInit, type AuthSession, type CaptchaArgs, CaptchaFailedError, type ChangePasswordInput, type CreateAuthClientOptions, EmailAlreadyHasPasswordError, type EmailOtpNamespace, type EmailPasswordNamespace, type ErrorHandler, type ErrorSource, type GoogleNamespace, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, type LocalStorageStoreOptions, type LoginWithGoogleInput, type LoginWithPasswordInput, MaxAttemptsError, MaxResendsError, NoPasswordSetError, NoPendingOtpError, OtpExpiredError, type OtpInfo, OtpInvalidError, type ProactiveRefreshConfig, type Profile, type ProfileAccount, type ProfileResult, type Project, RateLimitedError, type RegisterInput, type RegisterResult, type ResendCodeResult, ResendCooldownError, type ResendLoginCodeInput, type ResendRegistrationCodeInput, type SendLoginCodeInput, type SendLoginCodeResult, type SessionChangeHandler, type SessionStore, type SetPasswordInput, type SignHashResult, type SubscribeOptions, type VerifyLoginCodeInput, type VerifyRegistrationCodeInput, type WalletAddressResult, type WalletNamespace, authErrorFromFetchFailure, authErrorFromResponse, createAuthClient, localStorageStore, memoryStore };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { t as createAuthClient } from "./client-CX3XFmOA.js";
-import { _ as authErrorFromResponse, a as InvalidCredentialsError, c as MaxAttemptsError, d as NoPendingOtpError, f as OtpExpiredError, g as authErrorFromFetchFailure, h as ResendCooldownError, i as EmailAlreadyHasPasswordError, l as MaxResendsError, m as RateLimitedError, n as AuthError, o as InvalidEmailError, p as OtpInvalidError, r as CaptchaFailedError, s as InvalidPasswordError, t as AccountSuspendedError, u as NoPasswordSetError } from "./authError-DbEZJnC4.js";
+import { t as createAuthClient } from "./client-DxhQkQcE.js";
+import { _ as authErrorFromResponse, a as InvalidCredentialsError, c as MaxAttemptsError, d as NoPendingOtpError, f as OtpExpiredError, g as authErrorFromFetchFailure, h as ResendCooldownError, i as EmailAlreadyHasPasswordError, l as MaxResendsError, m as RateLimitedError, n as AuthError, o as InvalidEmailError, p as OtpInvalidError, r as CaptchaFailedError, s as InvalidPasswordError, t as AccountSuspendedError, u as NoPasswordSetError } from "./authError-CYUAl2Jt.js";
 import { n as memoryStore, t as localStorageStore } from "./sessionStore-DD6lON9W.js";
 export { AccountSuspendedError, AuthError, CaptchaFailedError, EmailAlreadyHasPasswordError, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, MaxAttemptsError, MaxResendsError, NoPasswordSetError, NoPendingOtpError, OtpExpiredError, OtpInvalidError, RateLimitedError, ResendCooldownError, authErrorFromFetchFailure, authErrorFromResponse, createAuthClient, localStorageStore, memoryStore };

package/dist/requests-jRLgNXyf.d.ts

@@ -0,0 +1,75 @@
+import { t as Account } from "./session-Cs_P7ojF.js";
+
+//#region src/types/profile.d.ts
+/** The account's profile record; every field is user-editable and nullable. */
+type Profile = {
+  displayName: string | null;
+  avatarUrl: string | null;
+  primaryEmail: string | null;
+  primaryPhone: string | null;
+};
+/** The account as returned by `auth.getProfile`, with sign-in capability flags. */
+type ProfileAccount = Account & {
+  /**
+   * `true` when the account can sign in with a password; `false` for
+   * Google-only or code-only accounts, which should call
+   * `auth.emailPassword.setPassword` rather than `changePassword`.
+   */
+  hasPassword: boolean;
+};
+/** Result of `auth.getProfile`, the identity read for the token holder. */
+type ProfileResult = {
+  /** `status` is the live account status, not a token-time snapshot. */account: ProfileAccount; /** `null` when the account has no profile row yet. */
+  profile: Profile | null;
+};
+//#endregion
+//#region src/types/requests.d.ts
+/** Optional captcha argument shared by every public unauthenticated entrypoint. */
+type CaptchaArgs = {
+  /** Cloudflare Turnstile token. Required when captcha is enabled on the server. */captchaToken?: string;
+};
+type SendLoginCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type VerifyLoginCodeInput = {
+  email: string;
+  code: string;
+};
+type ResendLoginCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type RegisterInput = {
+  email: string;
+  password: string;
+} & CaptchaArgs;
+type VerifyRegistrationCodeInput = {
+  email: string;
+  code: string;
+};
+type ResendRegistrationCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type LoginWithPasswordInput = {
+  email: string;
+  password: string;
+} & CaptchaArgs;
+type SetPasswordInput = {
+  password: string;
+};
+type ChangePasswordInput = {
+  currentPassword: string;
+  newPassword: string;
+};
+/**
+ * Exactly one of the two shapes. `idToken` comes from Google Identity Services
+ * (`renderButton` / One Tap). `code` is the authorization code from
+ * `google.accounts.oauth2.initCodeClient` in popup mode; the server exchanges
+ * it for the ID token, so the client secret never reaches the browser.
+ */
+type LoginWithGoogleInput = {
+  idToken: string;
+} | {
+  code: string;
+};
+//#endregion
+export { RegisterInput as a, SendLoginCodeInput as c, VerifyRegistrationCodeInput as d, Profile as f, LoginWithPasswordInput as i, SetPasswordInput as l, ProfileResult as m, ChangePasswordInput as n, ResendLoginCodeInput as o, ProfileAccount as p, LoginWithGoogleInput as r, ResendRegistrationCodeInput as s, CaptchaArgs as t, VerifyLoginCodeInput as u };

package/dist/types/index.d.ts

@@ -1,4 +1,4 @@
 import { a as OtpInfo, c as ResendCodeResult, i as ErrorSource, l as SendLoginCodeResult, n as AuthSession, o as Project, r as ErrorHandler, s as RegisterResult, t as Account, u as SessionChangeHandler } from "../session-Cs_P7ojF.js";
-import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, i as LoginWithPasswordInput, l as SetPasswordInput, n as ChangePasswordInput, o as ResendLoginCodeInput, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, t as CaptchaArgs, u as VerifyLoginCodeInput } from "../requests-eTORIjY5.js";
+import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, f as Profile, i as LoginWithPasswordInput, l as SetPasswordInput, m as ProfileResult, n as ChangePasswordInput, o as ResendLoginCodeInput, p as ProfileAccount, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, t as CaptchaArgs, u as VerifyLoginCodeInput } from "../requests-jRLgNXyf.js";
 import { n as AccessTokenPayloadProject, t as AccessTokenPayload } from "../tokens-BXrPLi5B.js";
-export { type AccessTokenPayload, type AccessTokenPayloadProject, type Account, type AuthSession, type CaptchaArgs, type ChangePasswordInput, type ErrorHandler, type ErrorSource, type LoginWithGoogleInput, type LoginWithPasswordInput, type OtpInfo, type Project, type RegisterInput, type RegisterResult, type ResendCodeResult, type ResendLoginCodeInput, type ResendRegistrationCodeInput, type SendLoginCodeInput, type SendLoginCodeResult, type SessionChangeHandler, type SetPasswordInput, type VerifyLoginCodeInput, type VerifyRegistrationCodeInput };
+export { type AccessTokenPayload, type AccessTokenPayloadProject, type Account, type AuthSession, type CaptchaArgs, type ChangePasswordInput, type ErrorHandler, type ErrorSource, type LoginWithGoogleInput, type LoginWithPasswordInput, type OtpInfo, type Profile, type ProfileAccount, type ProfileResult, type Project, type RegisterInput, type RegisterResult, type ResendCodeResult, type ResendLoginCodeInput, type ResendRegistrationCodeInput, type SendLoginCodeInput, type SendLoginCodeResult, type SessionChangeHandler, type SetPasswordInput, type VerifyLoginCodeInput, type VerifyRegistrationCodeInput };

package/dist/wallet/index.d.ts

@@ -1,4 +1,4 @@
-import { t as AuthClient } from "../index-B2RuGLX_.js";
+import { t as AuthClient } from "../index-URk8yf8l.js";
 import { LocalAccount } from "viem";
 
 //#region src/wallet/index.d.ts

package/package.json

@@ -1,7 +1,20 @@
 {
   "name": "@baliola/auth-sdk",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Client SDK for Baliola Auth",
+  "keywords": [
+    "auth",
+    "authentication",
+    "passwordless",
+    "otp",
+    "email-otp",
+    "jwt",
+    "session",
+    "sdk",
+    "typescript",
+    "esm",
+    "baliola"
+  ],
   "license": "SEE LICENSE IN LICENSE",
   "author": "Baliola Development Team",
   "type": "module",
@@ -41,26 +54,47 @@
     "README.md",
     "CHANGELOG.md"
   ],
+  "engines": {
+    "node": ">=20.3.0"
+  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/baliola/baliola-auth.git",
-    "directory": "sdk"
+    "url": "git+https://github.com/baliola/baliola-auth-sdk.git"
+  },
+  "homepage": "https://github.com/baliola/baliola-auth-sdk#readme",
+  "bugs": {
+    "url": "https://github.com/baliola/baliola-auth-sdk/issues"
   },
   "scripts": {
     "build": "tsdown",
     "typecheck": "bash scripts/typecheck.sh",
     "test": "bun test test/unit",
+    "lint": "eslint",
+    "lint:fix": "eslint --fix",
+    "format": "prettier --write \"{src,test}/**/*.ts\" \"*.ts\"",
+    "format:check": "prettier --check \"{src,test}/**/*.ts\" \"*.ts\"",
     "prepublishOnly": "bun run build"
   },
   "peerDependencies": { "viem": "^2.47.6" },
+  "peerDependenciesMeta": { "viem": { "optional": true } },
   "devDependencies": {
-    "@types/bun": "latest",
+    "@eslint/js": "^10.0.1",
+    "@types/bun": "^1.4.0",
+    "eslint": "^10.7.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-import-x": "^4.17.1",
+    "eslint-plugin-prettier": "^5.5.6",
+    "eslint-plugin-unused-imports": "^4.4.1",
+    "globals": "^17.7.0",
+    "jiti": "^2.7.0",
+    "prettier": "3.8.1",
     "tsdown": "^0.21.10",
     "typescript": "^5.7.0",
+    "typescript-eslint": "^8.64.0",
     "viem": "^2.47.6"
   }
 }

package/dist/requests-eTORIjY5.d.ts

@@ -1,42 +0,0 @@
-//#region src/types/requests.d.ts
-/** Optional captcha argument shared by every public unauthenticated entrypoint. */
-type CaptchaArgs = {
-  /** Cloudflare Turnstile token. Required when captcha is enabled on the server. */captchaToken?: string;
-};
-type SendLoginCodeInput = {
-  email: string;
-} & CaptchaArgs;
-type VerifyLoginCodeInput = {
-  email: string;
-  code: string;
-};
-type ResendLoginCodeInput = {
-  email: string;
-} & CaptchaArgs;
-type RegisterInput = {
-  email: string;
-  password: string;
-} & CaptchaArgs;
-type VerifyRegistrationCodeInput = {
-  email: string;
-  code: string;
-};
-type ResendRegistrationCodeInput = {
-  email: string;
-} & CaptchaArgs;
-type LoginWithPasswordInput = {
-  email: string;
-  password: string;
-} & CaptchaArgs;
-type SetPasswordInput = {
-  password: string;
-};
-type ChangePasswordInput = {
-  currentPassword: string;
-  newPassword: string;
-};
-type LoginWithGoogleInput = {
-  idToken: string;
-};
-//#endregion
-export { RegisterInput as a, SendLoginCodeInput as c, VerifyRegistrationCodeInput as d, LoginWithPasswordInput as i, SetPasswordInput as l, ChangePasswordInput as n, ResendLoginCodeInput as o, LoginWithGoogleInput as r, ResendRegistrationCodeInput as s, CaptchaArgs as t, VerifyLoginCodeInput as u };