@coreiam/auth 1.0.392-beta.0 → 1.0.392-beta.2

package/dist/core/index.d.ts

@@ -73,9 +73,14 @@ export declare class CoreIAM {
       * this instance's API key. Server-to-server, read-only.
       * THROWS on failure — an audit must never silently see an empty roster.
       */
-    listIdentities(): Promise<{
+    listIdentities(params?: {
+        limit?: number;
+        offset?: number;
+        roles?: string[];
+    }): Promise<{
         users: DirectoryIdentity[];
         total: number;
+        next_offset?: number;
     }>;
     private readCookieHeader;
     private readSessionCookie;

package/dist/core/index.js

@@ -72,14 +72,30 @@ class CoreIAM {
       * this instance's API key. Server-to-server, read-only.
       * THROWS on failure — an audit must never silently see an empty roster.
       */
-    async listIdentities() {
-        const response = await this.proxy('/api/v1/directory', { method: 'GET' }, new Headers());
+    async listIdentities(params) {
+        const search = new URLSearchParams();
+        if (params?.limit != null)
+            search.set('limit', String(params.limit));
+        if (params?.offset != null)
+            search.set('offset', String(params.offset));
+        if (params?.roles?.length)
+            search.set('roles', params.roles.join(','));
+        const qs = search.toString();
+        const response = await this.proxy(`/api/v1/directory${qs ? `?${qs}` : ''}`, { method: 'GET' }, new Headers());
         if (!response.ok) {
             const body = await response.text().catch(() => '');
             throw new Error(`listIdentities failed: ${response.status} ${body}`);
         }
-        const data = await response.json();
-        return { users: data.users ?? [], total: data.total ?? 0 };
+        const data = await response.json().catch(() => null);
+        if (!data || !Array.isArray(data.users)) {
+            throw new Error(`listIdentities: unexpected response shape — HTTP 200 without a users array. ` +
+                `This is not an empty directory; verify COREIAM_API_URL points at the CoreIAM gateway.`);
+        }
+        return {
+            users: data.users,
+            total: typeof data.total === 'number' ? data.total : data.users.length,
+            ...(typeof data.next_offset === 'number' ? { next_offset: data.next_offset } : {}),
+        };
     }
     readCookieHeader(input) {
         if (typeof input === 'string')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreiam/auth",
-  "version": "1.0.392-beta.0",
+  "version": "1.0.392-beta.2",
   "main": "./dist/core/index.js",
   "types": "./dist/core/index.d.ts",
   "exports": {