@finueva/auth 0.31.0 → 0.32.0

package/dist/{types-B_5eALVZ.d.ts → types-BU8vZrhF.d.ts}

@@ -379,6 +379,15 @@ interface EnterpriseConnection {
   updatedAt: Date;
 }
 /** OIDC self-service configuration. Client secrets are write-only. */
+interface EnterpriseConnectionDomain {
+  domain: string;
+  revision: number;
+  primary: boolean;
+  verified: boolean;
+  dnsRecordName: string;
+  dnsRecordValue: string;
+  challengeExpiresAt: Date;
+}
 interface EnterpriseConnectionSetup {
   id: string;
   revision: number;
@@ -388,19 +397,23 @@ interface EnterpriseConnectionSetup {
   memberJit: boolean;
   /** Require the provider to attest email verification. Defaults to true for a new connection. */
   requireVerifiedEmail: boolean;
+  /** An enabled provider requires a genuine organization/session admission when true. */
+  requireOrganizationSignIn: boolean;
   capability: "federated_sign_in" | "managed_lifecycle";
   groupsSync: boolean;
-  domain: string;
+  domain: string | null;
+  domains: EnterpriseConnectionDomain[];
   domainVerified: boolean;
   validatedAt: Date | null;
   testedAt: Date | null;
-  dnsRecordName: string;
-  dnsRecordValue: string;
-  challengeExpiresAt: Date;
+  dnsRecordName: string | null;
+  dnsRecordValue: string | null;
+  challengeExpiresAt: Date | null;
   redirectUri: string;
 }
 interface CreateEnterpriseConnectionInput {
   requireVerifiedEmail?: boolean;
+  requireOrganizationSignIn?: boolean;
   /** SCIM requires provisioned users before enterprise sign-in. A used connection cannot change mode. */
   provisioning?: boolean;
   groupsSync?: boolean;
@@ -409,11 +422,12 @@ interface CreateEnterpriseConnectionInput {
   issuer: string;
   clientId: string;
   clientSecret: string;
-  domain: string;
+  domain: string | null;
   memberJit: boolean;
 }
 interface UpdateEnterpriseConnectionInput {
   requireVerifiedEmail?: boolean;
+  requireOrganizationSignIn?: boolean;
   /** SCIM requires provisioned users before enterprise sign-in. A used connection cannot change mode. */
   provisioning?: boolean;
   groupsSync?: boolean;
@@ -516,6 +530,13 @@ interface OrganizationMemberAuthority {
   actor: Omit<OrganizationManualRoleChangeResult, "status">;
   target: Omit<OrganizationManualRoleChangeResult, "status">;
 }
+/** Explicit version 2 preparation data. A null target role means no manual contribution. */
+interface OrganizationMemberAuthorityV2 extends Omit<OrganizationMemberAuthority, "target"> {
+  version: 2;
+  target: Omit<OrganizationMemberAuthority["target"], "manualRole"> & {
+    manualRole: OrganizationManualRole | null;
+  };
+}
 interface OrganizationOwnershipTransferInput {
   outgoingOwnerMembershipId: string;
   successorMembershipId: string;
@@ -557,6 +578,21 @@ interface ClosingOrganization {
 interface ClosingOrganizationList {
   organizations: ClosingOrganization[];
 }
+type OrganizationSignInState = {
+  status: "available";
+  mode: "membership" | "provider";
+} | {
+  status: "sign_in_required";
+  connectionId: string;
+};
+interface OrganizationSignInStates {
+  organizations: Array<{
+    organizationId: string;
+    state: OrganizationSignInState | {
+      status: "forbidden";
+    };
+  }>;
+}
 interface AuthClientOptions {
   authOrigin: string;
   appOrigin: string;
@@ -584,7 +620,9 @@ interface FinuevaAuthClient {
   getSession(): Promise<AuthSession | null>;
   listOrganizations(input?: OrganizationPageInput): Promise<OrganizationPage>;
   getOrganization(organizationId: string): Promise<AuthOrganization>;
+  getOrganizationSignInState(organizationId: string): Promise<OrganizationSignInState>;
   getOrganizationMemberAuthority(organizationId: string, memberId: string): Promise<OrganizationMemberAuthority>;
+  getOrganizationMemberAuthorityV2(organizationId: string, memberId: string): Promise<OrganizationMemberAuthorityV2>;
   /** Browser cookie session and exact registered app Origin required. Native bearer setup is not supported. */
   getOrganizationApplicationRegistration(organizationId: string, applicationId: string): Promise<OrganizationApplicationRegistration>;
   registerOrganizationApplication(organizationId: string, applicationId: string, input: RegisterOrganizationApplicationInput): Promise<RegisteredOrganizationApplication>;
@@ -646,6 +684,15 @@ interface FinuevaAuthClient {
   }): Promise<EnterpriseConnectionSetup | {
     removed: true;
   }>;
+  addEnterpriseConnectionDomain(organizationId: string, connectionId: string, input: {
+    expectedRevision: number;
+    domain: string;
+  }): Promise<EnterpriseConnectionSetup>;
+  actOnEnterpriseConnectionDomain(organizationId: string, connectionId: string, domain: string, input: {
+    expectedRevision: number;
+    expectedDomainRevision: number;
+    action: "challenge" | "verify" | "remove";
+  }): Promise<EnterpriseConnectionSetup>;
   /** Cookie-only. Reads SCIM credential state for an eligible managed-lifecycle connection. */
   getScimCredential(organizationId: string, connectionId: string): Promise<ScimCredentialState>;
   issueScimCredential(organizationId: string, connectionId: string): Promise<ScimCredentialIssuance>;
@@ -689,4 +736,4 @@ interface FinuevaAuthClient {
   onSessionChange(listener: (session: AuthSession | null) => void): () => void;
 }
 //#endregion
-export { OrganizationWorkspaceSelection as $, EnterpriseConnection as A, UpdateEnterpriseConnectionInput as At, OrganizationDisplay as B, AuthErrorCode as Bt, CreatedOrganizationTeam as C, SocialIdTokenProvider as Ct, DepartedOrganizationMemberPage as D, TwoFactorEnrollment as Dt, DepartedOrganizationMember as E, SuspendedOrganizationMemberStatus as Et, InvitationDecline as F, OrganizationApplicationRegistration as Ft, OrganizationMemberPage as G, OrganizationInvitationPage as H, UserApiCredential as Ht, OrganizationClosure as I, RegisterOrganizationApplicationInput as It, OrganizationPageInput as J, OrganizationMemberPageInput as K, OrganizationClosureCancelInput as L, RegisteredOrganizationApplication as Lt, EnterpriseConnectionSetup as M, UpdateOrganizationTeamDisplayInput as Mt, FinuevaAuthClient as N, UpdateProfileInput as Nt, DriveCredential as O, TwoFactorStatus as Ot, InvitationAcceptance as P, WorkspaceSelection as Pt, OrganizationTeamPage as Q, OrganizationClosureStartInput as R, OrganizationDirectoryEntry as Rt, CreatedOrganizationMemberInvitation as S, SocialIdTokenInput as St, DeletedOrganizationTeam as T, SuspendedOrganizationMemberPage as Tt, OrganizationMember as U, UserApiCredentialInput as Ut, OrganizationInvitation as V, AuthErrorStatus as Vt, OrganizationMemberAuthority as W, OrganizationTeamDisplay as X, OrganizationTeam as Y, OrganizationTeamMemberPage as Z, ClosingOrganization as _, RotateScimCredentialInput as _t, AuthPersistence as a, PlatformRoleApplied as at, CreateOrganizationMemberInvitationInput as b, SendVerificationEmailInput as bt, AuthSessionInventory as c, PlatformRoleFirstApproval as ct, AuthUser as d, ReceivedOrganizationInvitationPage as dt, PasskeyInventory as et, CanceledOrganizationInvitation as f, RecentAuthenticationStatus as ft, CeremonyReturnInput as g, RestoredOrganizationMember as gt, CeremonyRecentAuthenticationRequest as h, ResentOrganizationInvitation as ht, AuthOrganization as i, PlatformRole as it, EnterpriseConnectionAction as j, UpdateOrganizationDisplayInput as jt, DriveCredentialInput as k, TwoFactorStepUpInput as kt, AuthSessionSummary as l, PlatformStatus as lt, CeremonyHandoffInput as m, RemovedOrganizationTeamMember as mt, AddedOrganizationTeamMember as n, PersonalWorkspaceSelection as nt, AuthPersistenceDriver as o, PlatformRoleApproval as ot, CeremonyHandoff as p, RemovedOrganizationMember as pt, OrganizationPage as q, AuthClientOptions as r, PlatformBootstrapRoleChangeInput as rt, AuthSession as s, PlatformRoleChangeRecentAuthenticationInput as st, AcceptInvitationInput as t, PasskeySummary as tt, AuthState as u, ReceivedOrganizationInvitation as ut, ClosingOrganizationList as v, ScimCredentialIssuance as vt, DeclineInvitationInput as w, SuspendedOrganizationMember as wt, CreatedOrganization as x, SignInInput as xt, CreateEnterpriseConnectionInput as y, ScimCredentialState as yt, OrganizationDeparture as z, AuthError as zt };
+export { OrganizationTeam as $, EnterpriseConnection as A, SuspendedOrganizationMemberStatus as At, OrganizationDeparture as B, RegisterOrganizationApplicationInput as Bt, CreatedOrganizationTeam as C, ScimCredentialState as Ct, DepartedOrganizationMemberPage as D, SocialIdTokenProvider as Dt, DepartedOrganizationMember as E, SocialIdTokenInput as Et, InvitationAcceptance as F, UpdateOrganizationDisplayInput as Ft, OrganizationMemberAuthority as G, AuthErrorStatus as Gt, OrganizationInvitation as H, OrganizationDirectoryEntry as Ht, InvitationDecline as I, UpdateOrganizationTeamDisplayInput as It, OrganizationMemberPageInput as J, OrganizationMemberAuthorityV2 as K, UserApiCredential as Kt, OrganizationClosure as L, UpdateProfileInput as Lt, EnterpriseConnectionDomain as M, TwoFactorStatus as Mt, EnterpriseConnectionSetup as N, TwoFactorStepUpInput as Nt, DriveCredential as O, SuspendedOrganizationMember as Ot, FinuevaAuthClient as P, UpdateEnterpriseConnectionInput as Pt, OrganizationSignInStates as Q, OrganizationClosureCancelInput as R, WorkspaceSelection as Rt, CreatedOrganizationMemberInvitation as S, ScimCredentialIssuance as St, DeletedOrganizationTeam as T, SignInInput as Tt, OrganizationInvitationPage as U, AuthError as Ut, OrganizationDisplay as V, RegisteredOrganizationApplication as Vt, OrganizationMember as W, AuthErrorCode as Wt, OrganizationPageInput as X, OrganizationPage as Y, OrganizationSignInState as Z, ClosingOrganization as _, RemovedOrganizationMember as _t, AuthPersistence as a, PasskeySummary as at, CreateOrganizationMemberInvitationInput as b, RestoredOrganizationMember as bt, AuthSessionInventory as c, PlatformRole as ct, AuthUser as d, PlatformRoleChangeRecentAuthenticationInput as dt, OrganizationTeamDisplay as et, CanceledOrganizationInvitation as f, PlatformRoleFirstApproval as ft, CeremonyReturnInput as g, RecentAuthenticationStatus as gt, CeremonyRecentAuthenticationRequest as h, ReceivedOrganizationInvitationPage as ht, AuthOrganization as i, PasskeyInventory as it, EnterpriseConnectionAction as j, TwoFactorEnrollment as jt, DriveCredentialInput as k, SuspendedOrganizationMemberPage as kt, AuthSessionSummary as l, PlatformRoleApplied as lt, CeremonyHandoffInput as m, ReceivedOrganizationInvitation as mt, AddedOrganizationTeamMember as n, OrganizationTeamPage as nt, AuthPersistenceDriver as o, PersonalWorkspaceSelection as ot, CeremonyHandoff as p, PlatformStatus as pt, OrganizationMemberPage as q, UserApiCredentialInput as qt, AuthClientOptions as r, OrganizationWorkspaceSelection as rt, AuthSession as s, PlatformBootstrapRoleChangeInput as st, AcceptInvitationInput as t, OrganizationTeamMemberPage as tt, AuthState as u, PlatformRoleApproval as ut, ClosingOrganizationList as v, RemovedOrganizationTeamMember as vt, DeclineInvitationInput as w, SendVerificationEmailInput as wt, CreatedOrganization as x, RotateScimCredentialInput as xt, CreateEnterpriseConnectionInput as y, ResentOrganizationInvitation as yt, OrganizationClosureStartInput as z, OrganizationApplicationRegistration as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/auth",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "description": "Public browser and server SDK for Finueva Auth",
   "type": "module",
   "sideEffects": false,