@crossworks/client-types 0.232.323 → 0.232.325

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossworks/client-types",
-  "version": "0.232.323",
+  "version": "0.232.325",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/dto/client.ts

@@ -123,3 +123,43 @@ export type ClientAdminRefusedReason =
 /** POST /api/auth/client-link { code, email } -> 200 { ok: true } and the
  *  session cookie (30 days), or one uniform 401 for every failure. */
 export type ClientLinkSignIn = { ok: true };
+
+// ── Email sign-in codes (C2b) ───────────────────────────────────────────────
+
+/** GET /api/auth/client-code: whether this brain sends sign-in codes (an
+ *  admin chose a sign-in sender). Says nothing about any email. */
+export type ClientCodeAvailability = { enabled: boolean };
+
+/** POST /api/auth/client-code { email } -> always 200 { ok: true } and a
+ *  fresh request cookie, whatever the email: the answer never tells whether
+ *  it is a client. When it is an active client login, a code is mailed
+ *  shortly after (8 digits, 10 minutes, one use, 5 tries, this browser). */
+export type ClientCodeRequested = { ok: true };
+
+/** POST /api/auth/client-code/verify { email, code } -> 200 { ok: true } and
+ *  the session cookie (30 days), or one uniform 401 for every failure (a
+ *  forwarded code without this browser's request cookie among them); 429
+ *  when rate limited. */
+export type ClientCodeSignIn = { ok: true };
+
+/** An email account the brain can send sign-in codes from. */
+export type ClientSigninSenderCandidate = { id: string; address: string };
+
+/** GET /api/team-admin/clients/signin-sender, and the answer to PUT
+ *  { accountId: string | null }. Codes are off while `sender` is null. When
+ *  a sender is chosen, its sent-mail folders are left out of mail sync
+ *  (`sentFoldersExcluded`), and every code mail carries a marker the sync
+ *  skips anywhere, so a live code never enters the brain. `capReached`: the
+ *  brain sent `dailyCap` codes in the last 24 hours; requests still answer
+ *  200, but nothing is sent until the window moves on. */
+export type ClientSigninSender = {
+  sender: ClientSigninSenderCandidate | null;
+  candidates: ClientSigninSenderCandidate[];
+  sentFoldersExcluded: string[];
+  dailyCap: number;
+  sentLast24h: number;
+  capReached: boolean;
+};
+
+/** Why an admin's sender choice was refused (the 4xx `reason`). */
+export type ClientSenderRefusedReason = 'account-not-found' | 'account-cannot-send';

package/src/dto/rows.ts

@@ -452,6 +452,9 @@ export type ProfilePreferences = {
    *  member home is the fallback. No share link is involved. Read via
    *  projectTeamHubAppId, never raw. */
   teamHubAppId?: string;
+  /** The email account client sign-in codes are sent from (client logins
+   *  C2b). A BRAIN key: one sender for the brain. Unset = codes are off. */
+  clientSigninSenderId?: string;
   /** Tags the owner curates as Dashboard sections on the /team overview: each
    *  tag renders a section of up to 5 team-visible shared pages carrying it
    *  (newest-updated first, title + summary + /s link). Order here = section

package/src/index.ts

@@ -112,6 +112,12 @@ export type {
 export type {
   ClientAdminRefusedReason,
   ClientLinkSignIn,
+  ClientCodeAvailability,
+  ClientCodeRequested,
+  ClientCodeSignIn,
+  ClientSigninSenderCandidate,
+  ClientSigninSender,
+  ClientSenderRefusedReason,
   ClientLoginCreated,
   ClientLoginList,
   ClientLoginRow,