@fytkit/sdk 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -4,6 +4,20 @@ All notable changes to `@fytkit/sdk` are documented in this file.
 Format: [Keep a Changelog 1.1.0](https://keepachangelog.com/en/1.1.0/).
 Versioning: [Semantic Versioning 2.0.0](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0](https://github.com/cbarlow1993/fytkit-web/compare/@fytkit/sdk@0.5.0...@fytkit/sdk@0.6.0) (2026-07-05)
+
+
+### Features
+
+* mobile settings/profile APIs — security, preferences, profile fields, billing (+ SDK) ([#118](https://github.com/cbarlow1993/fytkit-web/issues/118)) ([4f607ca](https://github.com/cbarlow1993/fytkit-web/commit/4f607ca2e18e2e46c23617c538a7795051c1359f))
+
+## [0.5.0](https://github.com/cbarlow1993/fytkit-web/compare/@fytkit/sdk@0.4.0...@fytkit/sdk@0.5.0) (2026-07-05)
+
+
+### Features
+
+* **sdk:** ad-hoc workout logging, stored PR history and streak endpoints ([#116](https://github.com/cbarlow1993/fytkit-web/issues/116)) ([5b069f9](https://github.com/cbarlow1993/fytkit-web/commit/5b069f993ee66d5aa4d54b04f2096d39a4ca7a37))
+
 ## [0.4.0](https://github.com/cbarlow1993/fytkit-web/compare/@fytkit/sdk@0.3.0...@fytkit/sdk@0.4.0) (2026-06-13)
 
 

package/README.md

@@ -48,11 +48,106 @@ await fytkit.auth.signOut();
 off();
 ```
 
+## Tracking a workout
+
+Log a workout ad-hoc (no program enrollment needed), record sets, complete
+it, then read back progress:
+
+```ts
+// Start an ad-hoc log against any workout — or pass { sessionId, enrollmentId }
+// instead to log a scheduled program session.
+const { data: log } = await fytkit.sessionLogs.create({ workoutId });
+
+await fytkit.sessionLogs.addSet({
+  id: log.id,
+  exerciseId,
+  setNumber: 1,
+  reps: 8,
+  weightKg: "80.00",
+});
+
+await fytkit.sessionLogs.update({ id: log.id, completedAt: new Date().toISOString() });
+
+// Workout-by-workout history for that workout
+const { data: history } = await fytkit.sessionLogs.list({ workoutId });
+
+// Stored progress: streak, PR history, aggregate summary
+const { data: streak } = await fytkit.progress.getStreak({});
+const { data: prs } = await fytkit.progression.listPrHistory({ exerciseId });
+const { data: summary } = await fytkit.progress.getSummary({ period: "12w" });
+```
+
+## Two-factor sign-in
+
+`auth.signIn` returns a discriminated result. When the trainee has 2FA
+enabled, complete the challenge with whichever method they choose:
+
+```ts
+const result = await fytkit.auth.signIn({ email, password });
+
+if (result.kind === "two_factor_required") {
+  const { challenge } = result; // challenge.availableMethods: "totp" | "backup_code" | "email_otp"
+
+  // TOTP from their authenticator app…
+  const session = await fytkit.auth.verifyTotp({ challenge, code: "123456" });
+
+  // …or a one-time backup code:
+  // await fytkit.auth.verifyBackupCode({ challenge, code });
+
+  // …or an emailed code:
+  // await fytkit.auth.requestEmailOtp({ challenge });
+  // await fytkit.auth.verifyEmailOtp({ challenge, code });
+}
+```
+
+Each verify method caches the issued session exactly like a plain sign-in
+(`signed_in` fires on `onAuthStateChange`).
+
+## 2FA enrollment & account security
+
+All of these require a signed-in session:
+
+```ts
+// Enroll: render totpUri as a QR code; show backupCodes exactly once.
+const { totpUri, backupCodes } = await fytkit.auth.enableTotp({ password });
+await fytkit.auth.verifyTotpSetup({ code: "123456" }); // SDK swaps the rotated token for you
+
+const status = await fytkit.auth.getSecurityStatus(); // { twoFactorEnabled, totpEnabled, hasBackupCodes }
+await fytkit.auth.regenerateBackupCodes({ password });
+await fytkit.auth.disableTwoFactor({ password });
+
+// Password change (verifies the current password server-side). With
+// revokeOtherSessions the SDK adopts the rotated token transparently.
+await fytkit.auth.changePassword({ currentPassword, newPassword, revokeOtherSessions: true });
+
+// Email change — a confirmation link is emailed to the new address;
+// nothing changes until the trainee opens it.
+await fytkit.auth.changeEmail({ newEmail });
+
+// Devices: revokeId is an opaque id (never the bearer token).
+const sessions = await fytkit.auth.listSessions();
+await fytkit.auth.revokeSession({ revokeId: sessions.find((s) => !s.isCurrent)!.revokeId });
+await fytkit.auth.revokeOtherSessions(); // "sign out of all other devices"
+```
+
+## Notification preferences
+
+Per-member toggles stored server-side (defaults apply until first write):
+
+```ts
+const { data: prefs } = await fytkit.preferences.getNotifications();
+await fytkit.preferences.updateNotifications({ streakAlerts: false }); // partial patch
+```
+
 ## What's included in this preview
 
 - `auth.signUp` / `signIn` / `signOut` / `getSession` / `onAuthStateChange`
 - `auth.requestPasswordReset` / `confirmPasswordReset` / `confirmEmail`
-- Data namespaces: `workouts`, `programs`, `recipes`, `nutrition`, `articles`, `enrollments`, `sessionLogs`, `progression`, `media`, `appConfig`, `subscription`
+- Two-factor: `auth.verifyTotp` / `verifyBackupCode` / `requestEmailOtp` / `verifyEmailOtp` (sign-in), `enableTotp` / `verifyTotpSetup` / `disableTwoFactor` / `regenerateBackupCodes` / `getSecurityStatus` (management)
+- Account security: `auth.changePassword` / `changeEmail` / `listSessions` / `revokeSession` / `revokeOtherSessions`
+- Data namespaces: `workouts`, `programs`, `recipes`, `nutrition`, `nutritionLog`, `profile`, `preferences`, `articles`, `enrollments`, `sessionLogs`, `progression`, `progress`, `bodyMetrics`, `media`, `appConfig`, `subscription`
+- Workout tracking: program session logs and ad-hoc workout logs (`sessionLogs.create` with `workoutId`), set logging, per-workout history (`sessionLogs.list({ workoutId })`)
+- Progress: `progress.getSummary` / `getAdherence` / `getStreak` (stored streaks), `progression.getPrSummary` / `listPrHistory` (stored PR history) / `getHistory`, `bodyMetrics.list` / `record` / `delete`
 - Automatic header injection (`X-Fytkit-Client-Id`, `Authorization: Bearer …`)
 - Proactive refresh ~60 s before token expiry + reactive 401 retry
 - Pluggable token storage (`localStorage` default, in-memory + cookie for SSR)