@finueva/auth 0.27.0 → 0.29.0

package/dist/server.d.ts

@@ -1,4 +1,33 @@
-import { $ as OrganizationWorkspaceSelection, B as OrganizationDisplay, C as CreatedOrganizationTeam, Ct as SocialIdTokenProvider, F as InvitationDecline, Ft as AuthError, G as OrganizationMemberPage, H as OrganizationInvitationPage, It as AuthErrorCode, J as OrganizationPageInput, K as OrganizationMemberPageInput, Lt as AuthErrorStatus, Mt as UpdateOrganizationTeamDisplayInput, O as DriveCredential, P as InvitationAcceptance, Pt as WorkspaceSelection, Q as OrganizationTeamPage, Rt as UserApiCredential, S as CreatedOrganizationMemberInvitation, St as SocialIdTokenInput, T as DeletedOrganizationTeam, U as OrganizationMember, V as OrganizationInvitation, W as OrganizationMemberAuthority, X as OrganizationTeamDisplay, Y as OrganizationTeam, Z as OrganizationTeamMemberPage, b as CreateOrganizationMemberInvitationInput, d as AuthUser, dt as ReceivedOrganizationInvitationPage, f as CanceledOrganizationInvitation, ht as ResentOrganizationInvitation, i as AuthOrganization, jt as UpdateOrganizationDisplayInput, k as DriveCredentialInput, mt as RemovedOrganizationTeamMember, n as AddedOrganizationTeamMember, nt as PersonalWorkspaceSelection, pt as RemovedOrganizationMember, q as OrganizationPage, s as AuthSession, t as AcceptInvitationInput, ut as ReceivedOrganizationInvitation, w as DeclineInvitationInput, x as CreatedOrganization, z as OrganizationDeparture, zt as UserApiCredentialInput } from "./types-rx4YxsoH.js";
+import { $ as OrganizationWorkspaceSelection, B as OrganizationDisplay, Bt as AuthErrorCode, C as CreatedOrganizationTeam, Ct as SocialIdTokenProvider, F as InvitationDecline, Ft as OrganizationApplicationRegistration, G as OrganizationMemberPage, H as OrganizationInvitationPage, Ht as UserApiCredential, It as RegisterOrganizationApplicationInput, J as OrganizationPageInput, K as OrganizationMemberPageInput, Lt as RegisteredOrganizationApplication, Mt as UpdateOrganizationTeamDisplayInput, O as DriveCredential, P as InvitationAcceptance, Pt as WorkspaceSelection, Q as OrganizationTeamPage, Rt as OrganizationDirectoryEntry, S as CreatedOrganizationMemberInvitation, St as SocialIdTokenInput, T as DeletedOrganizationTeam, U as OrganizationMember, Ut as UserApiCredentialInput, V as OrganizationInvitation, Vt as AuthErrorStatus, W as OrganizationMemberAuthority, X as OrganizationTeamDisplay, Y as OrganizationTeam, Z as OrganizationTeamMemberPage, b as CreateOrganizationMemberInvitationInput, d as AuthUser, dt as ReceivedOrganizationInvitationPage, f as CanceledOrganizationInvitation, ht as ResentOrganizationInvitation, i as AuthOrganization, jt as UpdateOrganizationDisplayInput, k as DriveCredentialInput, mt as RemovedOrganizationTeamMember, n as AddedOrganizationTeamMember, nt as PersonalWorkspaceSelection, pt as RemovedOrganizationMember, q as OrganizationPage, s as AuthSession, t as AcceptInvitationInput, ut as ReceivedOrganizationInvitation, w as DeclineInvitationInput, x as CreatedOrganization, z as OrganizationDeparture, zt as AuthError } from "./types-B_5eALVZ.js";
+//#region src/organization-directory/service.d.ts
+interface OrganizationDirectoryLookupInput {
+  organizationId: string;
+  applicationId: string;
+  organizationGeneration: string;
+}
+interface OrganizationDirectorySearchInput {
+  applicationId: string;
+  query?: string;
+  limit?: number;
+  cursor?: string;
+}
+interface OrganizationDirectoryPage {
+  organizations: OrganizationDirectoryEntry[];
+  /** An empty page can have a continuation. Only null means the search is exhausted. */
+  nextCursor: string | null;
+}
+interface OrganizationDirectoryAuthOptions {
+  authOrigin: string;
+  fetch?: typeof globalThis.fetch;
+  timeoutMs?: number;
+}
+interface FinuevaOrganizationDirectoryAuth {
+  lookupOrganization(input: OrganizationDirectoryLookupInput, serviceAssertion: string): Promise<OrganizationDirectoryEntry | null>;
+  searchOrganizations(input: OrganizationDirectorySearchInput, serviceAssertion: string): Promise<OrganizationDirectoryPage>;
+}
+/** Server-only directory. A directory entry identifies an incarnation; it grants no membership or billing authority. */
+declare function createOrganizationDirectoryAuth(options: OrganizationDirectoryAuthOptions): FinuevaOrganizationDirectoryAuth;
+//#endregion
 //#region src/product-operations/types.d.ts
 type AccountProductOperationPhase = "snapshot" | "consume" | "receipt";
 interface AccountProductOperationProof {
@@ -229,6 +258,69 @@ interface FinuevaDriveProvisioningAuth {
 /** Service authority only. Never pass an incoming User request or session to this client. */
 declare function createDriveProvisioningAuth(options: DriveProvisioningAuthOptions): FinuevaDriveProvisioningAuth;
 //#endregion
+//#region src/user-directory.d.ts
+interface UserDirectoryEntry {
+  applicationId: string;
+  /** Opaque application-scoped identifier. This is not the canonical Auth User ID. */
+  userId: string;
+  /** Immutable application-scoped incarnation. A replacement User cannot inherit it. */
+  userGeneration: string;
+  lifecycle: "active" | "suspended" | "deleted";
+}
+interface UserDirectoryLookupInput {
+  applicationId: string;
+  userId: string;
+  userGeneration: string;
+}
+interface UserDirectoryListInput {
+  applicationId: string;
+  limit?: number;
+  cursor?: string;
+}
+interface UserDirectoryMembersInput extends UserDirectoryListInput {
+  organizationId: string;
+  organizationGeneration: string;
+}
+interface UserDirectoryResolveInput {
+  applicationId: string;
+  authUserId: string;
+}
+interface UserDirectoryPage {
+  users: UserDirectoryEntry[];
+  /** Only null means the collection is exhausted. */ nextCursor: string | null;
+}
+interface UserDirectoryMember {
+  user: UserDirectoryEntry;
+  role: "owner" | "admin" | "member";
+  membershipStatus: "active" | "suspended";
+}
+interface UserDirectoryMembersPage {
+  applicationId: string;
+  organizationId: string;
+  organizationGeneration: string;
+  members: UserDirectoryMember[];
+  nextCursor: string | null;
+}
+/** Private service authority. Never forward this object to an operator or browser. */
+interface UserDirectoryBinding {
+  user: UserDirectoryEntry;
+  authUserId: string;
+}
+interface UserDirectoryAuthOptions {
+  authOrigin: string;
+  fetch?: typeof globalThis.fetch;
+  timeoutMs?: number;
+}
+interface FinuevaUserDirectoryAuth {
+  listUsers(input: UserDirectoryListInput, assertion: string): Promise<UserDirectoryPage>;
+  lookupUser(input: UserDirectoryLookupInput, assertion: string): Promise<UserDirectoryEntry | null>;
+  listOrganizationMembers(input: UserDirectoryMembersInput, assertion: string): Promise<UserDirectoryMembersPage>;
+  resolveUser(input: UserDirectoryResolveInput, assertion: string): Promise<UserDirectoryEntry | null>;
+  resolveUserBinding(input: UserDirectoryLookupInput, assertion: string): Promise<UserDirectoryBinding | null>;
+}
+/** Server-only service assertions. This client has no session authority and performs no automatic retry. */
+declare function createUserDirectoryAuth(options: UserDirectoryAuthOptions): FinuevaUserDirectoryAuth;
+//#endregion
 //#region src/server.d.ts
 interface ServerAuthOptions {
   authOrigin: string;
@@ -260,6 +352,9 @@ interface FinuevaServerAuth {
     applicationCredential: string;
   }): Promise<OrganizationMemberApplicationAccess>;
   getOrganizationMemberAuthority(organizationId: string, memberId: string): Promise<OrganizationMemberAuthority>;
+  /** Browser cookie session and exact registered app Origin required. Native bearer setup is not supported. */
+  getOrganizationApplicationRegistration(organizationId: string, applicationId: string): Promise<OrganizationApplicationRegistration>;
+  registerOrganizationApplication(organizationId: string, applicationId: string, input: RegisterOrganizationApplicationInput): Promise<RegisteredOrganizationApplication>;
   createOrganization(name: string, slug: string, idempotencyKey: string): Promise<CreatedOrganization>;
   createOrganizationTeam(organizationId: string, name: string, idempotencyKey: string): Promise<CreatedOrganizationTeam>;
   createOrganizationMemberInvitation(organizationId: string, input: CreateOrganizationMemberInvitationInput): Promise<CreatedOrganizationMemberInvitation>;
@@ -290,4 +385,4 @@ interface FinuevaServerAuth {
 }
 declare function createServerAuth(options: ServerAuthOptions): FinuevaServerAuth;
 //#endregion
-export { type AcceptInvitationInput, type AccountProductOperationAuthOptions, type AccountProductOperationConsumer, type AccountProductOperationInput, type AccountProductOperationPhase, type AccountProductOperationProof, type AccountProductOperationReceipt, type AccountProductOperationSnapshot, type AccountProductOperationSnapshotInput, type AddedOrganizationTeamMember, AuthError, type AuthErrorCode, type AuthErrorStatus, type AuthOrganization, type AuthSession, type AuthUser, type CanceledOrganizationInvitation, type CompleteGoogleAccountRecoveryInput, type CreateOrganizationMemberInvitationInput, type CreatedOrganization, type CreatedOrganizationMemberInvitation, type CreatedOrganizationTeam, type DeclineInvitationInput, type DeletedOrganizationTeam, type DriveCredential, type DriveCredentialInput, type DriveProvisioningAuthOptions, type DriveProvisioningCredential, type DriveRecipient, type DriveRecipientAuthOptions, type FinuevaDriveProvisioningAuth, type FinuevaDriveRecipientAuth, type FinuevaIdentityResolverAuth, type FinuevaMembershipResolverAuth, FinuevaServerAuth, type GoogleAccountRecovery, type GoogleAccountRecoveryInput, type IdentityResolverAuthOptions, type InvitationAcceptance, type InvitationDecline, type MembershipResolverAuthOptions, type OrganizationDeparture, type OrganizationDisplay, type OrganizationInvitation, type OrganizationInvitationPage, type OrganizationMember, type OrganizationMemberApplicationAccess, type OrganizationMemberApplicationAccessInput, type OrganizationMemberAuthority, type OrganizationMemberPage, type OrganizationMemberPageInput, type OrganizationPage, type OrganizationPageInput, type OrganizationPresenceAuthorization, type OrganizationPresenceInput, type OrganizationTeam, type OrganizationTeamDisplay, type OrganizationTeamMemberPage, type OrganizationTeamPage, type OrganizationWorkspaceSelection, type PersonalWorkspaceSelection, type ReceivedOrganizationInvitation, type ReceivedOrganizationInvitationPage, type RemovedOrganizationMember, type RemovedOrganizationTeamMember, type ResentOrganizationInvitation, type ResolveDriveRecipientInput, type ResolveIdentityInput, type ResolveMembershipBatchInput, type ResolveMembershipInput, type ResolvedIdentity, type ResolvedMembership, type ResolvedMembershipBatch, type ResolvedMembershipRole, ServerAuthOptions, ServerInvitationAcceptance, ServerSignOutResult, ServerSocialIdTokenSession, type SocialIdTokenInput, type SocialIdTokenProvider, type UpdateOrganizationDisplayInput, type UpdateOrganizationTeamDisplayInput, type UserApiCredential, type UserApiCredentialInput, type UserApiIdentity, type UserApiVerifierOptions, type WorkspaceSelection, createAccountProductOperationAuth, createDriveProvisioningAuth, createDriveRecipientAuth, createIdentityResolverAuth, createMembershipResolverAuth, createServerAuth, createUserApiVerifier };
+export { type AcceptInvitationInput, type AccountProductOperationAuthOptions, type AccountProductOperationConsumer, type AccountProductOperationInput, type AccountProductOperationPhase, type AccountProductOperationProof, type AccountProductOperationReceipt, type AccountProductOperationSnapshot, type AccountProductOperationSnapshotInput, type AddedOrganizationTeamMember, AuthError, type AuthErrorCode, type AuthErrorStatus, type AuthOrganization, type AuthSession, type AuthUser, type CanceledOrganizationInvitation, type CompleteGoogleAccountRecoveryInput, type CreateOrganizationMemberInvitationInput, type CreatedOrganization, type CreatedOrganizationMemberInvitation, type CreatedOrganizationTeam, type DeclineInvitationInput, type DeletedOrganizationTeam, type DriveCredential, type DriveCredentialInput, type DriveProvisioningAuthOptions, type DriveProvisioningCredential, type DriveRecipient, type DriveRecipientAuthOptions, type FinuevaDriveProvisioningAuth, type FinuevaDriveRecipientAuth, type FinuevaIdentityResolverAuth, type FinuevaMembershipResolverAuth, type FinuevaOrganizationDirectoryAuth, FinuevaServerAuth, type FinuevaUserDirectoryAuth, type GoogleAccountRecovery, type GoogleAccountRecoveryInput, type IdentityResolverAuthOptions, type InvitationAcceptance, type InvitationDecline, type MembershipResolverAuthOptions, type OrganizationApplicationRegistration, type OrganizationDeparture, type OrganizationDirectoryAuthOptions, type OrganizationDirectoryEntry, type OrganizationDirectoryLookupInput, type OrganizationDirectoryPage, type OrganizationDirectorySearchInput, type OrganizationDisplay, type OrganizationInvitation, type OrganizationInvitationPage, type OrganizationMember, type OrganizationMemberApplicationAccess, type OrganizationMemberApplicationAccessInput, type OrganizationMemberAuthority, type OrganizationMemberPage, type OrganizationMemberPageInput, type OrganizationPage, type OrganizationPageInput, type OrganizationPresenceAuthorization, type OrganizationPresenceInput, type OrganizationTeam, type OrganizationTeamDisplay, type OrganizationTeamMemberPage, type OrganizationTeamPage, type OrganizationWorkspaceSelection, type PersonalWorkspaceSelection, type ReceivedOrganizationInvitation, type ReceivedOrganizationInvitationPage, type RegisterOrganizationApplicationInput, type RegisteredOrganizationApplication, type RemovedOrganizationMember, type RemovedOrganizationTeamMember, type ResentOrganizationInvitation, type ResolveDriveRecipientInput, type ResolveIdentityInput, type ResolveMembershipBatchInput, type ResolveMembershipInput, type ResolvedIdentity, type ResolvedMembership, type ResolvedMembershipBatch, type ResolvedMembershipRole, ServerAuthOptions, ServerInvitationAcceptance, ServerSignOutResult, ServerSocialIdTokenSession, type SocialIdTokenInput, type SocialIdTokenProvider, type UpdateOrganizationDisplayInput, type UpdateOrganizationTeamDisplayInput, type UserApiCredential, type UserApiCredentialInput, type UserApiIdentity, type UserApiVerifierOptions, type UserDirectoryAuthOptions, type UserDirectoryBinding, type UserDirectoryEntry, type UserDirectoryListInput, type UserDirectoryLookupInput, type UserDirectoryMember, type UserDirectoryMembersInput, type UserDirectoryMembersPage, type UserDirectoryPage, type UserDirectoryResolveInput, type WorkspaceSelection, createAccountProductOperationAuth, createDriveProvisioningAuth, createDriveRecipientAuth, createIdentityResolverAuth, createMembershipResolverAuth, createOrganizationDirectoryAuth, createServerAuth, createUserApiVerifier, createUserDirectoryAuth };