@bounded-sh/client 0.0.7 → 0.0.8

package/dist/auth/index.d.ts

@@ -53,11 +53,25 @@ export declare function sendEmailOtp(email: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
+/**
+ * Send a 6-digit login code by text message. Requires the configured Bounded
+ * auth issuer to have text OTP explicitly enabled and SMS delivery configured.
+ * Works on web AND React Native.
+ */
+export declare function sendTextOtp(phoneNumber: string): Promise<{
+    ok: true;
+    expiresInSeconds?: number;
+}>;
 /**
  * Verify the `code` for `email`, establish the session, and return the user.
  * Step 2 of the inline email flow. Coexists with signInAnonymously()/wallets.
  */
 export declare function verifyEmailOtp(email: string, code: string): Promise<User | null>;
+/**
+ * Verify the text-message `code`, establish the session, and return the user.
+ * Phone-only users have no `user.email`; use `user.id` for app identity.
+ */
+export declare function verifyTextOtp(phoneNumber: string, code: string): Promise<User | null>;
 /**
  * UPGRADE the current anonymous (guest) session by linking an email — Firebase
  * `linkWithCredential` parity. Send the code first with `sendEmailOtp(email)`,
@@ -71,3 +85,4 @@ export declare function login(options?: LoginOptions): Promise<User | null>;
 export declare function getCurrentAuthMethod(): string | null;
 export declare function logout(): Promise<void>;
 export { loginWithRedirect, linkWithRedirect, completeLoginFromRedirect, loginWithPopup, completeLoginInPopup } from './oidc-auth';
+export type { HostedAuthMethod, OidcLoginOptions, PopupLoginOptions } from './oidc-auth';

package/dist/auth/oidc-auth.d.ts

@@ -1,27 +1,41 @@
 import type { User } from '@bounded-sh/core';
+export type HostedAuthMethod = 'email' | 'text' | 'phone' | 'google' | 'apple' | 'github' | (string & {});
+export interface OidcLoginOptions {
+    redirectUri: string;
+    /**
+     * Hosted-login methods to show. Omit to show every method enabled on the
+     * Bounded issuer. Include social provider ids directly, e.g.
+     * `['email', 'google']` or `['google', 'github']`. `text`/`phone`
+     * are shown only when the issuer explicitly enables text OTP.
+     */
+    methods?: readonly HostedAuthMethod[];
+    /**
+     * Start this provider immediately. Use for app-owned buttons like
+     * "Continue with Google". For `provider: 'email'`, the hosted OTP form is
+     * shown without social alternatives. `provider: 'text'`/`'phone'` works only
+     * when the issuer explicitly enables text OTP.
+     */
+    provider?: HostedAuthMethod;
+}
+export interface PopupLoginOptions extends OidcLoginOptions {
+    width?: number;
+    height?: number;
+}
 /** Start login: navigate the whole page to the hosted Bounded login. Returns after redirect
  *  to `redirectUri?code=...`, where you call completeLoginFromRedirect(). Web only. */
-export declare function loginWithRedirect(opts: {
-    redirectUri: string;
-}): Promise<void>;
+export declare function loginWithRedirect(opts: OidcLoginOptions): Promise<void>;
 /** UPGRADE the current anonymous (guest) session by linking a SOCIAL/redirect login
  *  (e.g. Google) — Firebase `linkWithPopup`/redirect parity. Stashes the guest token,
  *  then runs the normal redirect login; `completeLoginFromRedirect()` on the callback
  *  page finishes the link automatically (if the social account is brand-new the guest's
  *  `@user.id` is preserved, else it stays separate). Requires an active guest session. */
-export declare function linkWithRedirect(opts: {
-    redirectUri: string;
-}): Promise<void>;
+export declare function linkWithRedirect(opts: OidcLoginOptions): Promise<void>;
 /** Finish login on the redirect_uri page: exchange ?code= for a token (PKCE-verified), store
  *  the session, and return the User. Idempotent: returns null if there's no ?code= in the URL. */
 export declare function completeLoginFromRedirect(): Promise<User | null>;
 /** Popup variant: open the hosted login in a popup; resolves with the User once the popup's
  *  redirect_uri page posts the code back. The redirect_uri page must call completeLoginInPopup(). */
-export declare function loginWithPopup(opts: {
-    redirectUri: string;
-    width?: number;
-    height?: number;
-}): Promise<User>;
+export declare function loginWithPopup(opts: PopupLoginOptions): Promise<User>;
 /** Call this on the redirect_uri page when login was opened via loginWithPopup(): posts the
  *  code back to the opener and closes. (For the redirect variant use completeLoginFromRedirect.) */
 export declare function completeLoginInPopup(openerOrigin: string): void;

package/dist/auth/providers/email-auth-provider.d.ts

@@ -5,11 +5,21 @@ export declare function sendEmailOtp(email: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
+/** Send a login code by text message. Requires the Bounded issuer to have text OTP explicitly enabled and SMS configured. */
+export declare function sendTextOtp(phoneNumber: string): Promise<{
+    ok: true;
+    expiresInSeconds?: number;
+}>;
 /**
  * Verify the code for `email` and establish the session. Step 2 of the flow.
  * Stores the Bounded id token (the realtime bearer) and sets the current user.
  */
 export declare function verifyEmailOtp(email: string, otp: string): Promise<User>;
+/**
+ * Verify the text-message code for `phoneNumber` and establish the session.
+ * Phone-only users have `user.email === null`; use `user.id` for ownership.
+ */
+export declare function verifyTextOtp(phoneNumber: string, otp: string): Promise<User>;
 /**
  * UPGRADE an anonymous (guest) session by LINKING an email credential — Firebase
  * `linkWithCredential` parity. The guest's `guestToken` is sent to the auth issuer

package/dist/auth/providers/mock-auth-provider.d.ts

@@ -23,6 +23,7 @@ export declare class MockAuthProvider implements AuthProvider {
      */
     signMessage(message: string): Promise<string>;
     signMessageMock(message: string): Promise<string>;
+    private generateOffchainSignature;
     /**
      * Mock transaction signing - returns the transaction as-is (no actual signing)
      */

package/dist/index.d.ts

@@ -1,8 +1,9 @@
 export { init, getCurrentUser, onAuthStateChanged, onAuthLoadingChanged, getAuthLoading, login, logout, } from "./global";
 export type { LoginOptions } from "./global";
 export { getConfig } from "@bounded-sh/core";
-export { getAuthProvider, signInAnonymously, sendEmailOtp, verifyEmailOtp, linkEmail, loginWithPrivy } from "./auth";
+export { getAuthProvider, signInAnonymously, sendEmailOtp, sendTextOtp, verifyEmailOtp, verifyTextOtp, linkEmail, loginWithPrivy } from "./auth";
 export { loginWithRedirect, linkWithRedirect, completeLoginFromRedirect, loginWithPopup, completeLoginInPopup } from "./auth";
+export type { HostedAuthMethod, OidcLoginOptions, PopupLoginOptions } from "./auth";
 export { get, getMany, docId, set, setMany, setFile, getFiles, search, queryAggregate, runQuery, runQueryMany, runExpression, runExpressionMany, signMessage, signTransaction, signAndSubmitTransaction, count, aggregate, GetOptions, SearchOptions, SetOptions, CountOptions, AggregateOptions, AggregateOperation, AggregateResult, AggregateSpec, AggregateRow, QueryAggregateOptions, } from "@bounded-sh/core";
 export type { GetOptions as BoundedGetOptions } from "@bounded-sh/core";
 export { subscribe } from "@bounded-sh/core";