@fonderie/client 0.15.1 → 0.17.0

package/brain/signatures.md

@@ -87,6 +87,14 @@ interface IChangePasswordInput {
     newPassword: string;
 }
 
+interface IGetLoginHistoryInput {
+    outcome?: 'success' | 'failed';
+    from?: Date;
+    to?: Date;
+    limit?: number;
+    cursor?: string;
+}
+
 interface ILoginInput {
     email: string;
     password: string;
@@ -143,10 +151,15 @@ new AuthClient(http: HttpClient, tokens: TokenStore): AuthClient
   .changePassword(input: IChangePasswordInput): Promise<IApiResponse<undefined>>
   .exportData(): Promise<IApiResponse<unknown>>
   .deleteUser(): Promise<IApiResponse<undefined>>
+  .getLoginHistory(input?: IGetLoginHistoryInput, opts?: IReadOptions | undefined): Promise<IApiResponse<ILoginHistoryPageResult>>
+  .listSessions(opts?: IReadOptions | undefined): Promise<IApiResponse<ISessionsResult>>
+  .terminateSession(id: string): Promise<IApiResponse<{ id: string; }>>
+  .terminateOtherSessions(): Promise<IApiResponse<{ count: number; }>>
 
 interface ICheckoutInput {
     plan: string;
     interval?: 'month' | 'year';
+    idempotencyKey?: string;
 }
 
 interface ICreatePlanInput {
@@ -526,6 +539,34 @@ interface IAuditPageResult {
     nextCursor: string | null;
 }
 
+interface ILoginEventDTO {
+    id: string;
+    method: string;
+    outcome: string;
+    failureReason: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: string;
+}
+
+interface ILoginHistoryPageResult {
+    events: ILoginEventDTO[];
+    nextCursor: string | null;
+}
+
+interface ISessionDTO {
+    id: string;
+    current: boolean;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: string;
+    expiresAt: string;
+}
+
+interface ISessionsResult {
+    sessions: ISessionDTO[];
+}
+
 interface ICancelSubscriptionInput {
     atPeriodEnd?: boolean;
 }

package/dist/index.cjs

@@ -381,6 +381,49 @@ var AuthClient = class {
       token: this.tokens.get()
     });
   }
+  // ── Security surfaces (login history + active sessions) ─────────────────────
+  // GET /auth/login-history — the caller's own attempts, newest first,
+  // keyset-paginated (pass the previous page's nextCursor to continue).
+  getLoginHistory(input = {}, opts) {
+    const params = new URLSearchParams();
+    if (input.limit !== void 0) params.set("limit", String(input.limit));
+    if (input.outcome) params.set("outcome", input.outcome);
+    if (input.from) params.set("from", input.from.toISOString());
+    if (input.to) params.set("to", input.to.toISOString());
+    if (input.cursor) params.set("cursor", input.cursor);
+    const qs = params.toString();
+    return this.http.request({
+      method: "GET",
+      path: `/auth/login-history${qs ? "?" + qs : ""}`,
+      token: this.tokens.get(),
+      bust: opts?.bust
+    });
+  }
+  // GET /auth/sessions — the caller's live sessions; one is flagged current.
+  listSessions(opts) {
+    return this.http.request({
+      method: "GET",
+      path: "/auth/sessions",
+      token: this.tokens.get(),
+      bust: opts?.bust
+    });
+  }
+  // DELETE /auth/sessions/:id — revoke one of the caller's sessions.
+  terminateSession(id) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/sessions/${encodeURIComponent(id)}`,
+      token: this.tokens.get()
+    });
+  }
+  // DELETE /auth/sessions/others — revoke every session except the current one.
+  terminateOtherSessions() {
+    return this.http.request({
+      method: "DELETE",
+      path: "/auth/sessions/others",
+      token: this.tokens.get()
+    });
+  }
 };
 
 // src/modules/billing.ts