@flow-industries/id 0.24.0 → 0.24.2

package/dist/sdk/types/index.d.ts

@@ -1,6 +1,7 @@
-export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
+export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportNotification, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
 export type { ActionCurve, ActionEventRequest, ActionEventResponse, ActionsApi, ActiveActionState, FinishActionRequest, ListStudySessionsOptions, ListStudySubjectsOptions, StartActionInput, StartActionResult, StudyApi, StudySubjectResponse, UseActiveActionOptions, XpEstimateContext, } from "./actions";
-export type { AccountRegistration, AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyEnrollment, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
+export type { AtprotoCompletion, AtprotoStartRequest, AtprotoStatus, } from "./atproto";
+export type { AccountRegistration, AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthorizationTransaction, AuthPageBootstrap, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyEnrollment, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
 export type { BodyRegion, CosmeticItem, CosmeticMaterial, CosmeticPaint, CosmeticSlot, EquipConflict, EquippedCosmetic, EquippedCosmetics, EquipRegion, PaintSlot, SettingsConflict, } from "./cosmetics";
 export { BODY_REGIONS, COSMETIC_MATERIALS } from "./cosmetics";
 export type { AccountDataDownload, AccountDataIdentity, BoundaryError, DialogCustomFeatures, DialogCustomLabels, DialogError, DialogReferrer, DialogState, Loadable, ProfileData, ProfileIdentity, SignInWithEmailProps, SignUpProps, } from "./dialog";
@@ -10,6 +11,7 @@ export type { GameEventReport, GameLifecycleEventName, GameLifecycleFeedEvent, G
 export { GAME_LIFECYCLE_EVENT_NAMES } from "./game";
 export type { AccountProfileData } from "./landing";
 export type { Bridge, BridgeParameters, FlowAccount, FlowRemote, FlowRemoteConfig, FromWindowOptions, MessageResponse, Messenger, OneOf, Payload, QueuedRequest, ReadyOptions, RemoteFlowState, RemoteState, Schema, Storage, Topic, WithReady, } from "./messenger";
+export type { MarkNotificationsReadInput, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, } from "./notifications";
 export type { OtpVerificationFailure, OtpVerificationResult, VerificationAdapter, } from "./otp";
 export type { Call, ConnectCapabilities, ConnectResponse, MethodName, MethodParams, MethodResult, RestoreResponse, RpcRequest, SendCallsParams, SendCallsRequest, SendCallsResponse, SendTransactionParams, SendTransactionRequest, SendTransactionResponse, SignMessageRequest, SignMessageResponse, SignTypedDataRequest, SignTypedDataResponse, TransactionArgs, TypedData, TypedDataDomain, TypedDataField, } from "./protocol";
 export { isPersonalSignParams, isSendCallsParams, isSendTransactionParams, } from "./protocol";

package/dist/sdk/types/notifications.d.ts

@@ -0,0 +1,65 @@
+/**
+ * In-app notifications — the shapes `/api/notifications` speaks (AUTH-351).
+ *
+ * A stored notification is an address row carrying no content, so every field
+ * of a {@link NotificationEntry} below is rendered at read time from the live
+ * source by that type's resolver. An entry therefore only exists while its
+ * referent does and while this viewer may still see it; nothing here is a copy
+ * of anything, and a client must not cache an entry as a durable record.
+ */
+/**
+ * One resolved notification, ready to render.
+ *
+ * `occurredAt` is the *source's* own instant (a reminder's occurrence start),
+ * which is what a panel formats relative time from — the server never bakes
+ * "in 10 minutes" into a polled response. `createdAt` is when the user was
+ * addressed, and it is what the page is ordered and paged on. `href` is a path
+ * inside the consuming app (`/events/<id>`), never an absolute URL: auth does
+ * not know which surface is rendering it.
+ */
+export interface NotificationEntry {
+    id: string;
+    type: string;
+    title: string;
+    body: string | null;
+    href: string | null;
+    /** A coarse family name the surface maps to its own icon set. */
+    icon: string;
+    occurredAt: string;
+    createdAt: string;
+    readAt: string | null;
+    seenAt: string | null;
+}
+/**
+ * Response of `GET /api/notifications`. A full page is returned whenever that
+ * many visible entries exist, so a suppressed row never eats a slot; feed
+ * `nextCursor` back as `?cursor=` until it is null.
+ */
+export interface NotificationPage {
+    notifications: NotificationEntry[];
+    nextCursor: string | null;
+}
+/**
+ * Response of `GET /api/notifications/unread-count`. `unseen` is the bell's
+ * badge, cleared by `POST /api/notifications/seen` when the panel opens; a
+ * list read writes nothing. `unread` is the per-entry styling count and is
+ * only cleared by `POST /api/notifications/read`. Both are counted over stored
+ * rows without resolving them, so either may count an entry that a list read
+ * would suppress.
+ */
+export interface NotificationCounts {
+    unread: number;
+    unseen: number;
+}
+/** Response of `POST /api/notifications/read`: rows this call changed, plus the fresh counts. */
+export interface NotificationReadResult extends NotificationCounts {
+    updated: number;
+}
+/** Body of `POST /api/notifications/read` — exactly one of the two. */
+export interface MarkNotificationsReadInput {
+    ids?: string[];
+    /** ISO instant; marks every notification addressed at or before it. */
+    before?: string;
+}
+/** Machine-readable refusal codes the notification routes answer with. */
+export type NotificationRefusal = "invalid_cursor";

package/dist/sdk/types/notifications.js

@@ -0,0 +1,9 @@
+/**
+ * In-app notifications — the shapes `/api/notifications` speaks (AUTH-351).
+ *
+ * A stored notification is an address row carrying no content, so every field
+ * of a {@link NotificationEntry} below is rendered at read time from the live
+ * source by that type's resolver. An entry therefore only exists while its
+ * referent does and while this viewer may still see it; nothing here is a copy
+ * of anything, and a client must not cache an entry as a durable record.
+ */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.24.0",
+  "version": "0.24.2",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -88,7 +88,7 @@
     "contracts:generate": "bun scripts/generate-contracts.ts",
     "contracts:check": "bun scripts/generate-contracts.ts --check && bun scripts/check-contract-compatibility.ts",
     "db:check": "bun scripts/db-check.ts",
-    "test:migrations": "bun test scripts/migrations.test.ts scripts/migration-drift.test.ts"
+    "test:migrations": "bun test scripts/migrations.test.ts scripts/migration-drift.test.ts scripts/oauth-migration.test.ts"
   },
   "peerDependencies": {
     "viem": ">=2.47.10",
@@ -139,6 +139,9 @@
     "sharp"
   ],
   "dependencies": {
+    "@atproto-labs/handle-resolver": "^0.4.9",
+    "@atproto/jwk-jose": "^0.2.4",
+    "@atproto/oauth-client": "^0.8.7",
     "@aws-sdk/client-s3": "^3.1073.0",
     "@flow-industries/ui": "^0.23.3",
     "@hono/otel": "^1.1.2",
@@ -160,6 +163,7 @@
     "drizzle-orm": "^0.45.1",
     "geist": "^1.7.0",
     "hono": "^4.11.5",
+    "ipaddr.js": "^2.5.0",
     "jose": "^6.1.3",
     "lucide-react": "^0.563.0",
     "motion": "^12.33.0",