@geekapps/auth-nextjs 0.24.0 → 0.26.0

package/dist/client.d.ts

@@ -11,6 +11,11 @@ declare class GeekappsSessionExpiredError extends Error {
 type UserStatus = "active" | "inactive" | "suspended";
 type OrganizationStatus = "active" | "inactive" | "suspended";
 type OAuthClientType = "public" | "confidential";
+/**
+ * Códigos de erro conhecidos devolvidos pelo auth-server. A lista é aberta
+ * (`string & {}`): códigos novos continuam tipados como string.
+ */
+type AuthErrorCode = "waitlist_required" | "waitlist_disabled" | "password_reset_required" | "account_locked" | "invalid_credentials" | "not_found" | "invalid_request" | "interaction_required" | (string & {});
 type AuthResult<T = unknown> = {
     success: true;
     data: T;
@@ -18,8 +23,10 @@ type AuthResult<T = unknown> = {
     success: false;
     error: string;
     status?: number;
-    /** Código de erro da API (ex.: "legal_fields_required", "invalid_tax_id"). */
-    code?: string;
+    /** Código de erro da API (ex.: "waitlist_required", "account_locked", "legal_fields_required"). */
+    code?: AuthErrorCode;
+    /** Segundos até poder tentar de novo (`account_locked`). */
+    retryAfter?: number;
     /** Campos obrigatórios que faltaram (ex.: "legalName", "legalAddress.city"). */
     missingFields?: string[];
 };
@@ -28,7 +35,8 @@ declare class GeekappsApiError extends Error {
     readonly status: number;
     readonly code?: string | undefined;
     readonly missingFields?: string[] | undefined;
-    constructor(message: string, status: number, code?: string | undefined, missingFields?: string[] | undefined);
+    readonly retryAfter?: number | undefined;
+    constructor(message: string, status: number, code?: string | undefined, missingFields?: string[] | undefined, retryAfter?: number | undefined);
 }
 /** standard: organização comum. legal: pessoa jurídica associada a um Tax ID (CNPJ ou genérico). */
 type OrganizationType = "standard" | "legal";
@@ -296,7 +304,52 @@ type OrganizationJoinRequest = {
     createdAt: string | Date;
     updatedAt: string | Date;
 };
+type WaitlistEntry = {
+    id: string;
+    email: string;
+    name: string | null;
+    status: WaitlistStatus;
+    position: number | null;
+    createdAt: string;
+    approvedAt: string | null;
+};
+type WaitlistList = {
+    waiting: number;
+    entries: WaitlistEntry[];
+};
+type ForcePasswordResetInput = {
+    organizationId: string;
+    applicationId: string;
+    userIds?: string[];
+    all?: boolean;
+};
+type ForcePasswordResetResult = {
+    ok: boolean;
+    scheduled: number;
+    alreadyPending: number;
+    skipped: number;
+    estimatedMinutes: number;
+    batchSize: number;
+    intervalSeconds: number;
+};
+type ForcePasswordResetProgress = {
+    pending: number;
+    done: number;
+    failed: number;
+    batchSize: number;
+    intervalSeconds: number;
+};
+/** Campos graváveis de uma Application via PATCH /applications/:id. */
+type ApplicationUpdateInput = {
+    name?: string;
+    description?: string | null;
+    imageUrl?: string | null;
+    /** Só e-mails aprovados na lista de espera podem se cadastrar. */
+    waitlistEnabled?: boolean;
+    [key: string]: unknown;
+};
 type OrganizationOwnedApplication = {
+    waitlistEnabled?: boolean;
     id: string;
     name: string;
     description: string | null;
@@ -506,6 +559,7 @@ declare function registerWithPassword(params: {
     imageUrl?: string;
     address?: Record<string, unknown>;
     password: string;
+    authorizationFlowId?: string;
     redirectTo?: string;
 }, options?: ClientActionOptions): Promise<AuthResult<RegisterResponse>>;
 declare function startGoogleLogin(params?: CallbackUrlOptions, options?: ClientActionOptions): void;
@@ -515,6 +569,22 @@ declare function requestPasswordlessLink(params: {
     redirectTo?: string;
     callbackUrl?: string;
 }, options?: ClientActionOptions): Promise<AuthResult>;
+type WaitlistStatus = "waiting" | "approved" | "joined";
+type JoinWaitlistParams = {
+    clientId: string;
+    email: string;
+    name?: string;
+};
+type JoinWaitlistResponse = {
+    ok: true;
+    status: WaitlistStatus;
+    position: number | null;
+};
+/**
+ * Entra na lista de espera de uma app com `waitlistEnabled`.
+ * Erros: code "not_found" (404) ou "waitlist_disabled" (409).
+ */
+declare function joinWaitlist(params: JoinWaitlistParams, options?: ClientActionOptions): Promise<AuthResult<JoinWaitlistResponse>>;
 type GeekappsAuthContextValue = {
     basePath: string;
     user: User | null;
@@ -553,6 +623,7 @@ type GeekappsAuthContextValue = {
         redirectTo?: string;
     }) => Promise<AuthResult<RegisterResponse>>;
     startGoogleLogin: (params?: CallbackUrlOptions) => void;
+    joinWaitlist: (params: JoinWaitlistParams) => Promise<AuthResult<JoinWaitlistResponse>>;
     requestPasswordlessLink: (params: {
         email: string;
         authorizationFlowId?: string;
@@ -736,4 +807,4 @@ type UseServiceAccountResult = {
 };
 declare function useServiceAccount(): UseServiceAccountResult;
 
-export { type AcceptInviteResult, type AddMemberInput, type AuthResult, type CallbackUrlOptions, type ConnectedAccount, type CreateServiceAccountInput, GeekappsApiError, type GeekappsAuthContextValue, GeekappsAuthProvider, type GeekappsAuthProviderProps, GeekappsSessionExpiredError, type JoinRequestStatus, type LoginResponse, type MemberInviteInput, type MemberRole, type MyOrganizationInvite, type OAuthClientType, type OidcPrompt, type Organization, type OrganizationInput, type OrganizationInvite, type OrganizationInvitePreview, type OrganizationJoinRequest, type OrganizationLegalAddress, type OrganizationLegalData, type OrganizationMember, type OrganizationMembership, type OrganizationOwnedApplication, type OrganizationStatus, type OrganizationType, type OrganizationUpdateInput, type Permission, type PermissionCheckOptions, type PermissionInput, type PermissionUpdateInput, type PublicOrganization, type RegisterResponse, type Role, type RoleAssignment, type RoleInput, type RolePermission, type RoleUpdateInput, type ServiceAccount, type ServiceAccountWithSecret, type SessionApplication, type SignInInput, type SignInOptions, type TaxIdLookupResult, type TaxIdType, type UpdateMemberInput, type UpdateMemberRoleInput, type UseAccountsResult, type UseInvitesResult, type UseJoinRequestsResult, type UseMembersResult, type UseOrgResult, type UsePermissionsResult, type UsePublicOrganizationsResult, type UseRolesResult, type UseServiceAccountResult, type UseSessionsResult, type UseUsersResult, type User, type UserInput, type UserSession, type UserStatus, loginWithPassword, registerWithPassword, requestPasswordlessLink, startGoogleLogin, useAccounts, useAuth, useInvites, useJoinRequests, useMembers, useOrg, usePermissions, usePublicOrganizations, useRoles, useServiceAccount, useSessions, useUsers };
+export { type AcceptInviteResult, type AddMemberInput, type ApplicationUpdateInput, type AuthErrorCode, type AuthResult, type CallbackUrlOptions, type ConnectedAccount, type CreateServiceAccountInput, type ForcePasswordResetInput, type ForcePasswordResetProgress, type ForcePasswordResetResult, GeekappsApiError, type GeekappsAuthContextValue, GeekappsAuthProvider, type GeekappsAuthProviderProps, GeekappsSessionExpiredError, type JoinRequestStatus, type JoinWaitlistParams, type JoinWaitlistResponse, type LoginResponse, type MemberInviteInput, type MemberRole, type MyOrganizationInvite, type OAuthClientType, type OidcPrompt, type Organization, type OrganizationInput, type OrganizationInvite, type OrganizationInvitePreview, type OrganizationJoinRequest, type OrganizationLegalAddress, type OrganizationLegalData, type OrganizationMember, type OrganizationMembership, type OrganizationOwnedApplication, type OrganizationStatus, type OrganizationType, type OrganizationUpdateInput, type Permission, type PermissionCheckOptions, type PermissionInput, type PermissionUpdateInput, type PublicOrganization, type RegisterResponse, type Role, type RoleAssignment, type RoleInput, type RolePermission, type RoleUpdateInput, type ServiceAccount, type ServiceAccountWithSecret, type SessionApplication, type SignInInput, type SignInOptions, type TaxIdLookupResult, type TaxIdType, type UpdateMemberInput, type UpdateMemberRoleInput, type UseAccountsResult, type UseInvitesResult, type UseJoinRequestsResult, type UseMembersResult, type UseOrgResult, type UsePermissionsResult, type UsePublicOrganizationsResult, type UseRolesResult, type UseServiceAccountResult, type UseSessionsResult, type UseUsersResult, type User, type UserInput, type UserSession, type UserStatus, type WaitlistEntry, type WaitlistList, type WaitlistStatus, joinWaitlist, loginWithPassword, registerWithPassword, requestPasswordlessLink, startGoogleLogin, useAccounts, useAuth, useInvites, useJoinRequests, useMembers, useOrg, usePermissions, usePublicOrganizations, useRoles, useServiceAccount, useSessions, useUsers };

package/dist/client.js

@@ -19,16 +19,18 @@ var GeekappsSessionExpiredError = class extends Error {
   }
 };
 var GeekappsApiError = class extends Error {
-  constructor(message, status, code, missingFields) {
+  constructor(message, status, code, missingFields, retryAfter) {
     super(message);
     this.status = status;
     this.code = code;
     this.missingFields = missingFields;
+    this.retryAfter = retryAfter;
     this.name = "GeekappsApiError";
   }
   status;
   code;
   missingFields;
+  retryAfter;
 };
 function normalizeBasePath(basePath) {
   return basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
@@ -41,6 +43,18 @@ async function parseError(response) {
   const data = await response.json().catch(() => null);
   return data?.error_description ?? data?.error ?? data?.message ?? `Request failed with status ${response.status}`;
 }
+async function apiErrorFromResponse(response) {
+  const data = await response.clone().json().catch(() => null);
+  const code = typeof data?.code === "string" ? data.code : typeof data?.error === "string" ? data.error : void 0;
+  const retry = Number(data?.retry_after ?? data?.retryAfter);
+  return new GeekappsApiError(
+    await parseError(response),
+    response.status,
+    code,
+    Array.isArray(data?.missingFields) ? data.missingFields : void 0,
+    Number.isFinite(retry) ? retry : void 0
+  );
+}
 function redirectTo(path) {
   window.location.assign(path);
 }
@@ -65,7 +79,7 @@ async function clientRequest(path, options = {}, basePath = "/api/auth") {
     method: options.method ?? "GET"
   });
   if (!response.ok) {
-    throw new Error(await parseError(response));
+    throw await apiErrorFromResponse(response);
   }
   if (response.status === 204) {
     return null;
@@ -79,6 +93,16 @@ async function toStandaloneAuthResult(fn) {
       data: await fn()
     };
   } catch (error) {
+    if (error instanceof GeekappsApiError) {
+      return {
+        success: false,
+        error: error.message,
+        status: error.status,
+        code: error.code,
+        missingFields: error.missingFields,
+        retryAfter: error.retryAfter
+      };
+    }
     return {
       success: false,
       error: error instanceof Error ? error.message : "Auth request failed"
@@ -143,6 +167,18 @@ async function requestPasswordlessLink(params, options) {
     )
   );
 }
+async function joinWaitlist(params, options) {
+  return toStandaloneAuthResult(
+    () => clientRequest(
+      "/waitlist/join",
+      {
+        body: { client_id: params.clientId, email: params.email, name: params.name },
+        method: "POST"
+      },
+      options?.basePath
+    )
+  );
+}
 var GeekappsAuthContext = createContext(null);
 function GeekappsAuthProvider({
   children,
@@ -176,13 +212,7 @@ function GeekappsAuthProvider({
         throw new GeekappsSessionExpiredError();
       }
       if (!response.ok) {
-        const data = await response.clone().json().catch(() => null);
-        throw new GeekappsApiError(
-          await parseError(response),
-          response.status,
-          typeof data?.code === "string" ? data.code : void 0,
-          Array.isArray(data?.missingFields) ? data.missingFields : void 0
-        );
+        throw await apiErrorFromResponse(response);
       }
       if (response.status === 204) {
         return null;
@@ -346,7 +376,8 @@ function GeekappsAuthProvider({
           error: error.message,
           status: error.status,
           code: error.code,
-          missingFields: error.missingFields
+          missingFields: error.missingFields,
+          retryAfter: error.retryAfter
         };
       }
       return { success: false, error: error instanceof Error ? error.message : "Unexpected error" };
@@ -462,6 +493,12 @@ function GeekappsAuthProvider({
         if (params?.authorizationFlowId) url.searchParams.set("flow_id", params.authorizationFlowId);
         redirectTo(url.toString());
       },
+      joinWaitlist: (params) => toAuthResult(
+        () => request("/waitlist/join", {
+          method: "POST",
+          body: { client_id: params.clientId, email: params.email, name: params.name }
+        })
+      ),
       requestPasswordlessLink: (params) => toAuthResult(() => request("/passwordless/link", { method: "POST", body: params })),
       refreshOrganizations,
       setCurrentOrg,
@@ -858,6 +895,7 @@ export {
   GeekappsApiError,
   GeekappsAuthProvider,
   GeekappsSessionExpiredError,
+  joinWaitlist,
   loginWithPassword,
   registerWithPassword,
   requestPasswordlessLink,