@fonderie/client 0.19.0 → 0.21.0

package/brain/signatures.md

@@ -84,6 +84,11 @@ new AuditClient(http: HttpClient, tokens: TokenStore): AuditClient
   .setWorkspaceId(workspaceId: string | undefined): void
   .listEvents(input?: IListAuditEventsInput, opts?: IReadOptions | undefined): Promise<IApiResponse<IAuditPageResult>>
 
+interface IAppleNativeInput {
+    identityToken: string;
+    nonce?: string;
+}
+
 interface IChangePasswordInput {
     currentPassword: string;
     newPassword: string;
@@ -139,6 +144,7 @@ new AuthClient(http: HttpClient, tokens: TokenStore): AuthClient
   .setAccessToken(token: string | undefined): void
   .register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>
   .login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>
+  .appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>
   .refreshTokens(refreshToken?: string | undefined): Promise<IApiResponse<IRefreshResult>>
   .forgotPassword(email: string): Promise<IApiResponse<undefined>>
   .resetPassword(input: IResetPasswordInput): Promise<IApiResponse<undefined>>

package/dist/index.cjs

@@ -90,10 +90,14 @@ var FonderieApiError = class extends Error {
   details;
   requestId;
 };
-function newRequestId() {
+function randHex(bytes) {
   const c = globalThis.crypto;
-  if (c?.randomUUID) return c.randomUUID();
-  return `r-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+  const arr = new Uint8Array(bytes);
+  if (c?.getRandomValues) c.getRandomValues(arr);
+  else for (let i = 0; i < bytes; i++) arr[i] = Math.floor(Math.random() * 256);
+  let out = "";
+  for (const b of arr) out += b.toString(16).padStart(2, "0");
+  return out;
 }
 var HttpClient = class {
   constructor(baseUrl, deps = {}) {
@@ -142,9 +146,11 @@ var HttpClient = class {
     return data;
   }
   async exec(opts, retried = false) {
-    const requestId = newRequestId();
+    const traceId = randHex(16);
+    const requestId = traceId;
     const headers = {
       "Content-Type": "application/json",
+      traceparent: `00-${traceId}-${randHex(8)}-01`,
       "X-Request-ID": requestId
     };
     if (opts.token) headers["Authorization"] = `Bearer ${opts.token}`;
@@ -288,6 +294,16 @@ var AuthClient = class {
       body: input
     });
   }
+  // Complete a native Sign in with Apple. Returns the same token/user envelope
+  // as login (no MFA branch — OAuth completions don't gate on MFA). Requires
+  // the API to enable the provider (`providers: ['apple']` + apple config).
+  appleNative(input) {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/apple/native",
+      body: input
+    });
+  }
   refreshTokens(refreshToken) {
     return this.http.request({
       method: "POST",