@finueva/auth 0.18.1 → 0.20.0

package/dist/types-Cv_qxcBP.d.ts

@@ -0,0 +1,591 @@
+//#region src/user-api/credential.d.ts
+interface UserApiCredentialInput {
+  applicationId: string;
+  forceRefresh?: boolean;
+}
+interface UserApiCredential {
+  tokenType: "Bearer";
+  token: string;
+  expiresAt: Date;
+}
+//#endregion
+//#region src/errors.d.ts
+type AuthErrorCode = "invalid_credentials" | "invalid_auth_input" | "account_conflict" | "google_recovery_in_progress" | "google_recovery_not_required" | "google_recovery_invalid" | "google_recovery_expired" | "google_recovery_account_mismatch" | "password_reset_invalid" | "authentication_required" | "request_origin_denied" | "invalid_request" | "invalid_invitation" | "invitation_unavailable" | "recipient_unavailable" | "invitation_recipient_mismatch" | "invitation_recovery_required" | "membership_removal_recovery_required" | "email_verification_required" | "invalid_workspace_selection" | "organization_context_too_large" | "credential_rate_limited" | "auth_request_rate_limited" | "state_conflict" | "access_denied" | "platform_target_unavailable" | "platform_quorum_unavailable" | "platform_recovery_required" | "identity_authority_unavailable" | "two_factor_required" | "two_factor_code_invalid" | "two_factor_challenge_expired" | "two_factor_locked" | "recent_sign_in_required" | "enterprise_recovery_required" | "recent_authentication_required" | "organization_closure_confirmation_mismatch" | "organization_closure_cancellation_ended" | "ceremony_return_refused" | "password_sign_in_required";
+type AuthErrorStatus = 400 | 401 | 403 | 404 | 405 | 409 | 410 | 413 | 415 | 422 | 429 | 503;
+declare class AuthError extends Error {
+  readonly code: AuthErrorCode;
+  readonly status: AuthErrorStatus;
+  readonly retryAfterSeconds?: number;
+  constructor(code: AuthErrorCode, status: AuthErrorStatus, retryAfterSeconds?: number);
+}
+//#endregion
+//#region src/types.d.ts
+interface AuthUser {
+  id: string;
+  name: string;
+  email: string;
+  emailVerified: boolean;
+  image: string | null;
+}
+interface AuthSession {
+  id: string;
+  expiresAt: Date;
+  user: AuthUser;
+}
+interface AuthOrganization {
+  id: string;
+  name: string;
+  slug: string;
+  logo: string | null;
+  lifecycle: "ordinary" | "managed";
+  role: "owner" | "admin" | "member";
+  capabilities: {
+    readMembers: true;
+    readTeams: true;
+    readInvitations: boolean;
+  };
+}
+interface OrganizationDisplay {
+  name: string;
+  slug: string;
+  logo: string | null;
+}
+type UpdateOrganizationDisplayInput = OrganizationDisplay;
+interface OrganizationTeamDisplay {
+  name: string;
+}
+type UpdateOrganizationTeamDisplayInput = OrganizationTeamDisplay;
+interface OrganizationPageInput {
+  limit?: number;
+  cursor?: string;
+}
+interface OrganizationPage {
+  organizations: AuthOrganization[];
+  nextCursor: string | null;
+}
+interface OrganizationMember {
+  id: string;
+  userId: string;
+  name: string;
+  email: string;
+  image: string | null;
+  role: "owner" | "admin" | "member";
+  owner: boolean;
+  joinedAt: Date;
+  teamIds: string[];
+}
+interface OrganizationMemberPage {
+  members: OrganizationMember[];
+  nextCursor: string | null;
+}
+interface OrganizationTeam {
+  id: string;
+  name: string;
+  category: "manual" | "managed";
+  createdAt: Date;
+}
+interface CreatedOrganization {
+  id: string;
+  name: string;
+  slug: string;
+}
+interface CreatedOrganizationTeam {
+  id: string;
+  name: string;
+}
+interface CreateOrganizationMemberInvitationInput {
+  email: string;
+  teamIds?: string[];
+  idempotencyKey: string;
+}
+interface CreatedOrganizationMemberInvitation {
+  id: string;
+  expiresAt: Date;
+}
+interface ResentOrganizationInvitation {
+  id: string;
+  expiresAt: Date;
+}
+interface CanceledOrganizationInvitation {
+  status: "canceled";
+}
+interface RemovedOrganizationMember {
+  status: "removed";
+}
+interface OrganizationDeparture {
+  status: "left";
+}
+interface SuspendedOrganizationMemberStatus {
+  status: "suspended";
+}
+/** A suspended membership. `id` is the suspension ID that restore and removal act on. */
+interface SuspendedOrganizationMember {
+  id: string;
+  userId: string;
+  name: string;
+  email: string;
+  image: string | null;
+  role: "admin" | "member";
+  teamIds: string[];
+  suspendedAt: Date;
+}
+interface SuspendedOrganizationMemberPage {
+  members: SuspendedOrganizationMember[];
+  nextCursor: string | null;
+}
+/** A User who left or was removed and is neither a member nor suspended now. */
+interface DepartedOrganizationMember {
+  userId: string;
+  name: string;
+  email: string;
+  image: string | null;
+  departure: "removed" | "left";
+  departedAt: Date;
+}
+interface DepartedOrganizationMemberPage {
+  members: DepartedOrganizationMember[];
+  nextCursor: string | null;
+}
+interface RestoredOrganizationMember {
+  status: "restored";
+  memberId: string;
+}
+interface AddedOrganizationTeamMember {
+  status: "added";
+}
+interface RemovedOrganizationTeamMember {
+  status: "removed";
+}
+interface DeletedOrganizationTeam {
+  status: "deleted";
+}
+interface OrganizationTeamPage {
+  teams: OrganizationTeam[];
+  nextCursor: string | null;
+}
+interface OrganizationTeamMemberPage {
+  memberIds: string[];
+  nextCursor: string | null;
+}
+interface OrganizationInvitation {
+  id: string;
+  email: string;
+  role: "owner" | "admin" | "member";
+  teamIds: string[];
+  inviter: {
+    membershipId: string;
+    name: string;
+  };
+  createdAt: Date;
+  expiresAt: Date;
+  status: "pending";
+}
+interface OrganizationInvitationPage {
+  invitations: OrganizationInvitation[];
+  nextCursor: string | null;
+}
+interface ReceivedOrganizationInvitation {
+  id: string;
+  organization: Pick<AuthOrganization, "id" | "name" | "slug" | "logo">;
+  role: "owner" | "admin" | "member";
+  teams: Array<{
+    id: string;
+    name: string;
+  }>;
+  inviterName: string;
+  expiresAt: Date;
+}
+interface ReceivedOrganizationInvitationPage {
+  invitations: ReceivedOrganizationInvitation[];
+  nextCursor: string | null;
+}
+interface AcceptInvitationInput {
+  invitationId: string;
+}
+interface InvitationAcceptance {
+  organizationId: string;
+}
+interface DeclineInvitationInput {
+  invitationId: string;
+}
+interface InvitationDecline {
+  status: "declined";
+}
+type AuthState = {
+  status: "loading";
+} | {
+  status: "cached";
+  session: AuthSession;
+  authoritative: false;
+} | {
+  status: "authenticated";
+  session: AuthSession;
+  authoritative: true;
+} | {
+  status: "unauthenticated";
+  session: null;
+  authoritative: true;
+} | {
+  status: "unavailable";
+  session: AuthSession | null;
+  authoritative: false;
+};
+interface AuthPersistenceDriver {
+  getItem(key: string): string | null | Promise<string | null>;
+  setItem(key: string, value: string): void | Promise<void>;
+  removeItem(key: string): void | Promise<void>;
+}
+type AuthPersistence = "local" | "session" | "memory" | AuthPersistenceDriver;
+interface PersonalWorkspaceSelection {
+  type: "personal";
+}
+interface OrganizationWorkspaceSelection {
+  type: "organization";
+  organizationId: string;
+}
+type WorkspaceSelection = PersonalWorkspaceSelection | OrganizationWorkspaceSelection;
+interface DriveCredential {
+  tokenType: "Bearer";
+  token: string;
+  expiresAt: Date;
+}
+interface SignInInput {
+  email: string;
+  password: string;
+}
+/** A new, unconfirmed authenticator secret. Show it once; Auth cannot show it again. */
+interface TwoFactorEnrollment {
+  /** The `otpauth://totp/...` address for a QR code. */
+  totpUri: string;
+  /** The Base32 secret for manual entry. */
+  secret: string;
+  /** Ten one-use backup codes. They become usable after confirmation. */
+  backupCodes: string[];
+}
+/** The password and one current authenticator code or unused backup code. */
+interface TwoFactorStepUpInput {
+  password: string;
+  code: string;
+}
+interface TwoFactorStatus {
+  enabled: boolean;
+}
+/** One active session of the current User. It never carries a token. */
+interface AuthSessionSummary {
+  id: string;
+  /** True for the session that made the request. */
+  current: boolean;
+  createdAt: Date;
+  /** The last time Auth refreshed the session. It is coarse and is not a presence signal. */
+  updatedAt: Date;
+  expiresAt: Date;
+  userAgent: string | null;
+  ipAddress: string | null;
+}
+interface AuthSessionInventory {
+  /** Up to 50 active sessions, most recently updated first. */
+  sessions: AuthSessionSummary[];
+  /** True when the User has more active sessions than the page shows. */
+  truncated: boolean;
+}
+/** Where the browser returns after an Auth-Origin ceremony. Auth checks it against the application's registration. */
+interface CeremonyReturnInput {
+  /** The application ID in Auth's `AUTH_CEREMONY_RETURN_ORIGINS` registration. */
+  applicationId: string;
+  /** The exact address to return to. Auth adds one value-free `finueva_ceremony` outcome parameter. */
+  returnTo: string;
+}
+type CeremonyRecentAuthenticationRequest = ({
+  action: "organization_ownership_transfer";
+  organizationId: string;
+} & OrganizationOwnershipTransferInput) | ({
+  action: "organization_closure_start";
+  organizationId: string;
+} & OrganizationClosureStartInput) | ({
+  action: "organization_closure_cancel";
+  organizationId: string;
+} & OrganizationClosureCancelInput);
+type CeremonyHandoffInput = CeremonyReturnInput & ({
+  purpose: "passkey_enrollment";
+} | {
+  purpose: "passkey_removal";
+  passkeyId: string;
+} | {
+  purpose: "recent_authentication";
+  request: CeremonyRecentAuthenticationRequest;
+});
+/** An Auth-Origin ceremony address. The fragment carries a single-use code that expires at `expiresAt`. */
+interface CeremonyHandoff {
+  url: string;
+  expiresAt: Date;
+}
+/** One passkey of the current User. It never carries a credential ID or public key. */
+interface PasskeySummary {
+  id: string;
+  name: string | null;
+  createdAt: Date | null;
+  deviceType: "singleDevice" | "multiDevice";
+  backedUp: boolean;
+}
+interface PasskeyInventory {
+  /** Up to 50 passkeys, newest first. */
+  passkeys: PasskeySummary[];
+  truncated: boolean;
+}
+/** Safe status of one enterprise OIDC connection. The client secret and role-mapping groups are never returned. */
+interface EnterpriseConnection {
+  id: string;
+  issuer: string;
+  clientId: string;
+  capability: "federated_sign_in" | "managed_lifecycle";
+  enabled: boolean;
+  domainVerified: boolean;
+  validatedAt: Date | null;
+  memberJit: boolean;
+  requireVerifiedEmail: boolean;
+  roleMappingConfigured: boolean;
+  updatedAt: Date;
+}
+interface ScimCredentialState {
+  status: "active" | "revoked" | "unissued";
+  revision: number | null;
+  currentCredentialId: string | null;
+  retiringExpiresAt: Date | null;
+  revokedAt: Date | null;
+}
+/** Shown once. Auth stores only a hash and cannot show the credential again. */
+interface ScimCredentialIssuance extends ScimCredentialState {
+  credential: string;
+}
+interface RotateScimCredentialInput {
+  expectedRevision: number;
+  /** Seconds, from 0 through 86400, during which the previous credential still works. */
+  overlapSeconds: number;
+}
+type SocialIdTokenProvider = "google" | "apple";
+interface SocialIdTokenInput {
+  provider: SocialIdTokenProvider;
+  idToken: string;
+  nonce?: string;
+  signUp: boolean;
+}
+interface UpdateProfileInput {
+  name?: string;
+  image?: string | null;
+}
+interface SendVerificationEmailInput {
+  email: string;
+  callbackURL?: string;
+}
+interface DriveCredentialInput {
+  workspace: WorkspaceSelection;
+  forceRefresh?: boolean;
+}
+type PlatformRole = "administrator" | "investigator";
+interface PlatformStatus {
+  eligible: boolean;
+  globalRevision: number;
+  roles: PlatformRole[];
+}
+interface PlatformRoleChangeRecentAuthenticationInput {
+  targetUserId: string;
+  requestedRoles: PlatformRole[];
+  expectedTargetRevision: number;
+  expectedGlobalRevision: number;
+  reasonCategory: "initial_bootstrap" | "personnel_change" | "privilege_review" | "quorum_recovery" | "security_response";
+  changeReference: string;
+  idempotencyKey: string;
+}
+interface PlatformBootstrapRoleChangeInput extends Omit<PlatformRoleChangeRecentAuthenticationInput, "reasonCategory" | "requestedRoles"> {
+  requestedRoles: ["administrator"] | ["administrator", "investigator"] | ["investigator", "administrator"];
+  reasonCategory: "initial_bootstrap";
+}
+interface PlatformRoleFirstApproval {
+  status: "awaiting_second_approval";
+  targetUserId: string;
+  targetRevision: number;
+  globalRevision: number;
+  roles: [];
+}
+interface PlatformRoleApplied {
+  status: "applied";
+  targetUserId: string;
+  targetRevision: number;
+  globalRevision: number;
+  roles: PlatformRole[];
+}
+type PlatformRoleApproval = PlatformRoleFirstApproval | PlatformRoleApplied;
+interface RecentAuthenticationStatus {
+  status: "pending" | "ready";
+}
+type OrganizationManualRole = "owner" | "admin" | "member";
+interface OrganizationManualRoleChangeInput {
+  requestedManualRole: OrganizationManualRole;
+  expectedActorAuthorityRevision: number;
+  expectedTargetAuthorityRevision: number;
+  idempotencyKey: string;
+}
+interface OrganizationManualRoleChangeResult {
+  status: "applied";
+  memberId: string;
+  manualRole: OrganizationManualRole;
+  role: OrganizationManualRole;
+  authorityRevision: number;
+}
+interface OrganizationMemberAuthority {
+  organizationId: string;
+  actor: Omit<OrganizationManualRoleChangeResult, "status">;
+  target: Omit<OrganizationManualRoleChangeResult, "status">;
+}
+interface OrganizationOwnershipTransferInput {
+  outgoingOwnerMembershipId: string;
+  successorMembershipId: string;
+  outgoingOwnerRole: "admin" | "member";
+  expectedActorAuthorityRevision: number;
+  expectedOutgoingOwnerAuthorityRevision: number;
+  expectedSuccessorAuthorityRevision: number;
+  idempotencyKey: string;
+}
+interface OrganizationOwnershipTransferResult {
+  status: "applied";
+  outgoingOwner: Omit<OrganizationManualRoleChangeResult, "status">;
+  successor: Omit<OrganizationManualRoleChangeResult, "status">;
+}
+interface OrganizationClosureStartInput {
+  /** The organization's current name, typed by the owner. Auth compares it exactly. */
+  confirmationName: string;
+  idempotencyKey: string;
+}
+interface OrganizationClosureCancelInput {
+  idempotencyKey: string;
+}
+interface OrganizationClosure {
+  organizationId: string;
+  state: "closing" | "cancelled";
+  startedAt: string;
+  /** Exactly 30 times 24 hours after `startedAt`. */
+  cancelUntil: string;
+  canCancel: boolean;
+}
+interface ClosingOrganization {
+  id: string;
+  name: string;
+  slug: string | null;
+  startedAt: string;
+  cancelUntil: string;
+  canCancel: boolean;
+}
+interface ClosingOrganizationList {
+  organizations: ClosingOrganization[];
+}
+interface AuthClientOptions {
+  authOrigin: string;
+  appOrigin: string;
+  fetch?: typeof globalThis.fetch;
+  now?: () => number;
+  persistence?: AuthPersistence;
+  timeoutMs?: number;
+}
+interface FinuevaAuthClient {
+  readonly _type: "browser";
+  getPlatformStatus(): Promise<PlatformStatus>;
+  startPlatformRoleChangeRecentAuthentication(input: PlatformRoleChangeRecentAuthenticationInput): Promise<RecentAuthenticationStatus>;
+  startOrganizationOwnerRoleChangeRecentAuthentication(organizationId: string, targetMembershipId: string, input: OrganizationManualRoleChangeInput): Promise<RecentAuthenticationStatus>;
+  startOrganizationOwnershipTransferRecentAuthentication(organizationId: string, input: OrganizationOwnershipTransferInput): Promise<RecentAuthenticationStatus>;
+  /** Starts the `organization_closure_start` action on the exact Auth Origin. */
+  startOrganizationClosureRecentAuthentication(organizationId: string, input: OrganizationClosureStartInput): Promise<RecentAuthenticationStatus>;
+  /** Starts the `organization_closure_cancel` action on the exact Auth Origin. */
+  startOrganizationClosureCancellationRecentAuthentication(organizationId: string, input: OrganizationClosureCancelInput): Promise<RecentAuthenticationStatus>;
+  approveBootstrapPlatformRoleChange(input: PlatformBootstrapRoleChangeInput): Promise<PlatformRoleApproval>;
+  addPasskey(): Promise<void>;
+  verifyRecentAuthenticationWithPasskey(): Promise<void>;
+  getRecentAuthenticationStatus(): Promise<RecentAuthenticationStatus>;
+  acceptInvitation(input: AcceptInvitationInput): Promise<InvitationAcceptance>;
+  declineInvitation(input: DeclineInvitationInput): Promise<InvitationDecline>;
+  getSession(): Promise<AuthSession | null>;
+  listOrganizations(input?: OrganizationPageInput): Promise<OrganizationPage>;
+  getOrganization(organizationId: string): Promise<AuthOrganization>;
+  getOrganizationMemberAuthority(organizationId: string, memberId: string): Promise<OrganizationMemberAuthority>;
+  createOrganization(name: string, slug: string, idempotencyKey: string): Promise<CreatedOrganization>;
+  createOrganizationTeam(organizationId: string, name: string, idempotencyKey: string): Promise<CreatedOrganizationTeam>;
+  createOrganizationMemberInvitation(organizationId: string, input: CreateOrganizationMemberInvitationInput): Promise<CreatedOrganizationMemberInvitation>;
+  resendOrganizationInvitation(organizationId: string, invitationId: string, idempotencyKey: string): Promise<ResentOrganizationInvitation>;
+  cancelOrganizationInvitation(organizationId: string, invitationId: string, idempotencyKey: string): Promise<CanceledOrganizationInvitation>;
+  removeOrganizationMember(organizationId: string, memberId: string, idempotencyKey: string): Promise<RemovedOrganizationMember>;
+  leaveOrganization(organizationId: string, idempotencyKey: string): Promise<OrganizationDeparture>;
+  suspendOrganizationMember(organizationId: string, memberId: string, idempotencyKey: string): Promise<SuspendedOrganizationMemberStatus>;
+  listSuspendedOrganizationMembers(organizationId: string, input?: OrganizationPageInput): Promise<SuspendedOrganizationMemberPage>;
+  restoreSuspendedOrganizationMember(organizationId: string, suspensionId: string, idempotencyKey: string): Promise<RestoredOrganizationMember>;
+  removeSuspendedOrganizationMember(organizationId: string, suspensionId: string, idempotencyKey: string): Promise<RemovedOrganizationMember>;
+  listRemovedOrganizationMembers(organizationId: string, input?: OrganizationPageInput): Promise<DepartedOrganizationMemberPage>;
+  addOrganizationTeamMember(organizationId: string, teamId: string, memberId: string, idempotencyKey: string): Promise<AddedOrganizationTeamMember>;
+  removeOrganizationTeamMember(organizationId: string, teamId: string, memberId: string, idempotencyKey: string): Promise<RemovedOrganizationTeamMember>;
+  deleteOrganizationTeam(organizationId: string, teamId: string, idempotencyKey: string): Promise<DeletedOrganizationTeam>;
+  updateOrganizationDisplay(organizationId: string, input: UpdateOrganizationDisplayInput): Promise<OrganizationDisplay>;
+  updateOrganizationTeamDisplay(organizationId: string, teamId: string, input: UpdateOrganizationTeamDisplayInput): Promise<OrganizationTeamDisplay>;
+  changeOrganizationMemberManualRole(organizationId: string, targetMembershipId: string, input: OrganizationManualRoleChangeInput): Promise<OrganizationManualRoleChangeResult>;
+  transferOrganizationOwnership(organizationId: string, input: OrganizationOwnershipTransferInput): Promise<OrganizationOwnershipTransferResult>;
+  /** Starts closure with a ready `organization_closure_start` proof. The organization then grants no authority. */
+  startOrganizationClosure(organizationId: string, input: OrganizationClosureStartInput): Promise<OrganizationClosure>;
+  /** Reads the latest closure. Only the owner who started it can read it. */
+  getOrganizationClosure(organizationId: string): Promise<OrganizationClosure>;
+  /** Cancels closure before `cancelUntil` with a ready `organization_closure_cancel` proof. */
+  cancelOrganizationClosure(organizationId: string, input: OrganizationClosureCancelInput): Promise<OrganizationClosure>;
+  /** Lists the caller's own closing organizations. They are absent from `listOrganizations()`. */
+  listClosingOrganizations(): Promise<ClosingOrganizationList>;
+  listOrganizationMembers(organizationId: string, input?: OrganizationPageInput): Promise<OrganizationMemberPage>;
+  listOrganizationTeams(organizationId: string, input?: OrganizationPageInput): Promise<OrganizationTeamPage>;
+  listOrganizationTeamMembers(organizationId: string, teamId: string, input?: OrganizationPageInput): Promise<OrganizationTeamMemberPage>;
+  listOrganizationInvitations(organizationId: string, input?: OrganizationPageInput): Promise<OrganizationInvitationPage>;
+  getOrganizationInvitation(organizationId: string, invitationId: string): Promise<OrganizationInvitation>;
+  listReceivedInvitations(input?: OrganizationPageInput): Promise<ReceivedOrganizationInvitationPage>;
+  getReceivedInvitation(invitationId: string): Promise<ReceivedOrganizationInvitation>;
+  sendVerificationEmail(input: SendVerificationEmailInput): Promise<void>;
+  signUp(email: string, password: string, name: string): Promise<AuthSession>;
+  signIn(input: SignInInput): Promise<AuthSession>;
+  /** Cookie-only. A manual owner or admin reads the organization's enterprise connection status. */
+  listEnterpriseConnections(organizationId: string): Promise<EnterpriseConnection[]>;
+  /** Cookie-only. Reads SCIM credential state for an eligible managed-lifecycle connection. */
+  getScimCredential(organizationId: string, connectionId: string): Promise<ScimCredentialState>;
+  issueScimCredential(organizationId: string, connectionId: string): Promise<ScimCredentialIssuance>;
+  rotateScimCredential(organizationId: string, connectionId: string, input: RotateScimCredentialInput): Promise<ScimCredentialIssuance>;
+  revokeScimCredential(organizationId: string, connectionId: string, input: {
+    expectedRevision: number;
+  }): Promise<ScimCredentialState>;
+  /** Completes a password sign-in that failed with `two_factor_required`, with a TOTP or backup code. */
+  verifyTwoFactor(code: string): Promise<AuthSession>;
+  getTwoFactorStatus(): Promise<TwoFactorStatus>;
+  startTwoFactorEnrollment(password: string): Promise<TwoFactorEnrollment>;
+  /** Turns the second factor on with a current code from the new authenticator. The session is replaced. */
+  confirmTwoFactorEnrollment(code: string): Promise<AuthSession>;
+  /** Turns the second factor off. The session is replaced. */
+  disableTwoFactor(input: TwoFactorStepUpInput): Promise<AuthSession>;
+  /** Replaces all backup codes. Earlier codes stop working. */
+  regenerateTwoFactorBackupCodes(input: TwoFactorStepUpInput): Promise<string[]>;
+  listSessions(): Promise<AuthSessionInventory>;
+  /** Signs out one other session. Use `signOut()` for the current session. */
+  revokeSession(sessionId: string): Promise<void>;
+  /** Signs out every session except the current one. */
+  revokeOtherSessions(): Promise<{
+    revoked: number;
+  }>;
+  /**
+   * Starts one Auth-Origin ceremony for the current session: passkey enrollment, passkey removal, or one
+   * organization recent-authentication action. Open the returned address in a top-level browser context.
+   */
+  createCeremonyHandoff(input: CeremonyHandoffInput): Promise<CeremonyHandoff>;
+  listPasskeys(): Promise<PasskeyInventory>;
+  renamePasskey(passkeyId: string, name: string): Promise<void>;
+  signInWithSocialIdToken(input: SocialIdTokenInput): Promise<AuthSession>;
+  updateProfile(input: UpdateProfileInput): Promise<AuthSession>;
+  changePassword(currentPassword: string, newPassword: string, revokeOtherSessions?: boolean): Promise<AuthSession>;
+  requestPasswordReset(email: string, redirectTo: string): Promise<void>;
+  resetPassword(token: string, newPassword: string): Promise<void>;
+  signOut(): Promise<void>;
+  getDriveCredential(input: DriveCredentialInput): Promise<DriveCredential>;
+  getUserApiCredential(input: UserApiCredentialInput): Promise<UserApiCredential>;
+  onAuthStateChange(listener: (state: AuthState) => void): () => void;
+  onSessionChange(listener: (session: AuthSession | null) => void): () => void;
+}
+//#endregion
+export { PlatformBootstrapRoleChangeInput as $, FinuevaAuthClient as A, AuthError as At, OrganizationMember as B, DeclineInvitationInput as C, TwoFactorEnrollment as Ct, DriveCredential as D, UpdateOrganizationTeamDisplayInput as Dt, DepartedOrganizationMemberPage as E, UpdateOrganizationDisplayInput as Et, OrganizationClosureStartInput as F, OrganizationTeam as G, OrganizationMemberPage as H, OrganizationDeparture as I, OrganizationTeamPage as J, OrganizationTeamDisplay as K, OrganizationDisplay as L, InvitationDecline as M, AuthErrorStatus as Mt, OrganizationClosure as N, UserApiCredential as Nt, DriveCredentialInput as O, UpdateProfileInput as Ot, OrganizationClosureCancelInput as P, UserApiCredentialInput as Pt, PersonalWorkspaceSelection as Q, OrganizationInvitation as R, CreatedOrganizationTeam as S, SuspendedOrganizationMemberStatus as St, DepartedOrganizationMember as T, TwoFactorStepUpInput as Tt, OrganizationPage as U, OrganizationMemberAuthority as V, OrganizationPageInput as W, PasskeyInventory as X, OrganizationWorkspaceSelection as Y, PasskeySummary as Z, ClosingOrganization as _, SignInInput as _t, AuthPersistence as a, PlatformStatus as at, CreatedOrganization as b, SuspendedOrganizationMember as bt, AuthSessionInventory as c, RecentAuthenticationStatus as ct, AuthUser as d, ResentOrganizationInvitation as dt, PlatformRole as et, CanceledOrganizationInvitation as f, RestoredOrganizationMember as ft, CeremonyReturnInput as g, SendVerificationEmailInput as gt, CeremonyRecentAuthenticationRequest as h, ScimCredentialState as ht, AuthOrganization as i, PlatformRoleFirstApproval as it, InvitationAcceptance as j, AuthErrorCode as jt, EnterpriseConnection as k, WorkspaceSelection as kt, AuthSessionSummary as l, RemovedOrganizationMember as lt, CeremonyHandoffInput as m, ScimCredentialIssuance as mt, AddedOrganizationTeamMember as n, PlatformRoleApproval as nt, AuthPersistenceDriver as o, ReceivedOrganizationInvitation as ot, CeremonyHandoff as p, RotateScimCredentialInput as pt, OrganizationTeamMemberPage as q, AuthClientOptions as r, PlatformRoleChangeRecentAuthenticationInput as rt, AuthSession as s, ReceivedOrganizationInvitationPage as st, AcceptInvitationInput as t, PlatformRoleApplied as tt, AuthState as u, RemovedOrganizationTeamMember as ut, ClosingOrganizationList as v, SocialIdTokenInput as vt, DeletedOrganizationTeam as w, TwoFactorStatus as wt, CreatedOrganizationMemberInvitation as x, SuspendedOrganizationMemberPage as xt, CreateOrganizationMemberInvitationInput as y, SocialIdTokenProvider as yt, OrganizationInvitationPage as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/auth",
-  "version": "0.18.1",
+  "version": "0.20.0",
   "description": "Public browser and server SDK for Finueva Auth",
   "type": "module",
   "sideEffects": false,