@hexclave/shared 1.0.0

package/dist/interface/crud/users.js

@@ -0,0 +1,193 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../../chunk-BE-pF4vm.js');
+let ______crud_js = require("../../crud.js");
+let ______schema_fields_js = require("../../schema-fields.js");
+______schema_fields_js = require_chunk.__toESM(______schema_fields_js);
+let __teams_js = require("./teams.js");
+
+//#region src/interface/crud/users.ts
+const restrictedByAdminMeta = {
+	restricted_by_admin: { openapiField: {
+		description: "Whether the user is restricted by an administrator. Can be set manually or by sign-up rules.",
+		exampleValue: false
+	} },
+	restricted_by_admin_reason: { openapiField: {
+		description: "Public reason shown to the user explaining why they are restricted. Optional.",
+		exampleValue: null
+	} },
+	restricted_by_admin_private_details: { openapiField: {
+		description: "Private details about the restriction (e.g., which sign-up rule triggered). Only visible to server access and above.",
+		exampleValue: null
+	} }
+};
+const countryCodeMeta = { openapiField: {
+	description: "Best-effort ISO country code captured at sign-up time from request geo headers.",
+	exampleValue: "US"
+} };
+const riskScoreFieldSchema = ______schema_fields_js.yupNumber().integer().min(0).max(100).defined();
+const signUpRiskScoresSchema = ______schema_fields_js.yupObject({ sign_up: ______schema_fields_js.yupObject({
+	bot: riskScoreFieldSchema,
+	free_trial_abuse: riskScoreFieldSchema
+}).defined() });
+const oauthProviderBaseFields = {
+	id: ______schema_fields_js.yupString().defined(),
+	account_id: ______schema_fields_js.yupString().defined()
+};
+const hiddenFieldMeta = { openapiField: { hidden: true } };
+function restrictedByAdminConsistencyTest(value) {
+	if (value == null) return true;
+	if (value.restricted_by_admin !== true) {
+		if (value.restricted_by_admin_reason != null) return this.createError({ message: "restricted_by_admin_reason must be null when restricted_by_admin is not true" });
+		if (value.restricted_by_admin_private_details != null) return this.createError({ message: "restricted_by_admin_private_details must be null when restricted_by_admin is not true" });
+	}
+	return true;
+}
+const usersCrudServerUpdateSchema = ______schema_fields_js.yupObject({
+	display_name: ______schema_fields_js.userDisplayNameSchema.optional(),
+	profile_image_url: ______schema_fields_js.profileImageUrlSchema.nullable().optional(),
+	client_metadata: ______schema_fields_js.userClientMetadataSchema.optional(),
+	client_read_only_metadata: ______schema_fields_js.userClientReadOnlyMetadataSchema.optional(),
+	server_metadata: ______schema_fields_js.userServerMetadataSchema.optional(),
+	primary_email: ______schema_fields_js.primaryEmailSchema.nullable().optional().nonEmpty(),
+	primary_email_verified: ______schema_fields_js.primaryEmailVerifiedSchema.optional(),
+	primary_email_auth_enabled: ______schema_fields_js.primaryEmailAuthEnabledSchema.optional(),
+	passkey_auth_enabled: ______schema_fields_js.userOtpAuthEnabledSchema.optional(),
+	password: ______schema_fields_js.userPasswordMutationSchema.optional(),
+	password_hash: ______schema_fields_js.userPasswordHashMutationSchema.optional(),
+	otp_auth_enabled: ______schema_fields_js.userOtpAuthEnabledMutationSchema.optional(),
+	totp_secret_base64: ______schema_fields_js.userTotpSecretMutationSchema.optional(),
+	selected_team_id: ______schema_fields_js.selectedTeamIdSchema.nullable().optional(),
+	is_anonymous: ______schema_fields_js.yupBoolean().oneOf([false]).optional(),
+	restricted_by_admin: ______schema_fields_js.yupBoolean().optional().meta(restrictedByAdminMeta.restricted_by_admin),
+	restricted_by_admin_reason: ______schema_fields_js.yupString().nullable().optional().meta(restrictedByAdminMeta.restricted_by_admin_reason),
+	restricted_by_admin_private_details: ______schema_fields_js.yupString().nullable().optional().meta(restrictedByAdminMeta.restricted_by_admin_private_details),
+	country_code: ______schema_fields_js.countryCodeSchema.nullable().optional().meta(countryCodeMeta),
+	risk_scores: signUpRiskScoresSchema.optional()
+}).defined().test("restricted_by_admin_consistency", "When restricted_by_admin is not true, reason and private_details must be null", restrictedByAdminConsistencyTest);
+const usersCrudServerReadSchema = ______schema_fields_js.yupObject({
+	id: ______schema_fields_js.userIdSchema.defined(),
+	primary_email: ______schema_fields_js.primaryEmailSchema.nullable().defined(),
+	primary_email_verified: ______schema_fields_js.primaryEmailVerifiedSchema.defined(),
+	primary_email_auth_enabled: ______schema_fields_js.primaryEmailAuthEnabledSchema.defined(),
+	display_name: ______schema_fields_js.userDisplayNameSchema.nullable().defined(),
+	selected_team: __teams_js.teamsCrudServerReadSchema.nullable().defined(),
+	selected_team_id: ______schema_fields_js.selectedTeamIdSchema.nullable().defined(),
+	profile_image_url: ______schema_fields_js.profileImageUrlSchema.nullable().defined(),
+	signed_up_at_millis: ______schema_fields_js.signedUpAtMillisSchema.defined(),
+	has_password: ______schema_fields_js.userHasPasswordSchema.defined(),
+	otp_auth_enabled: ______schema_fields_js.userOtpAuthEnabledSchema.defined(),
+	passkey_auth_enabled: ______schema_fields_js.userOtpAuthEnabledSchema.defined(),
+	client_metadata: ______schema_fields_js.userClientMetadataSchema,
+	client_read_only_metadata: ______schema_fields_js.userClientReadOnlyMetadataSchema,
+	server_metadata: ______schema_fields_js.userServerMetadataSchema,
+	last_active_at_millis: ______schema_fields_js.userLastActiveAtMillisSchema.nonNullable().defined(),
+	is_anonymous: ______schema_fields_js.yupBoolean().defined(),
+	is_restricted: ______schema_fields_js.yupBoolean().defined().meta({ openapiField: {
+		description: "Whether the user is in restricted state (has signed up but not completed onboarding requirements)",
+		exampleValue: false
+	} }),
+	restricted_reason: ______schema_fields_js.restrictedReasonSchema.nullable().defined().meta({ openapiField: {
+		description: "The reason why the user is restricted (e.g., type: \"email_not_verified\", \"anonymous\", or \"restricted_by_administrator\"), null if not restricted",
+		exampleValue: null
+	} }),
+	restricted_by_admin: ______schema_fields_js.yupBoolean().defined().meta(restrictedByAdminMeta.restricted_by_admin),
+	restricted_by_admin_reason: ______schema_fields_js.yupString().nullable().defined().meta(restrictedByAdminMeta.restricted_by_admin_reason),
+	restricted_by_admin_private_details: ______schema_fields_js.yupString().nullable().defined().meta(restrictedByAdminMeta.restricted_by_admin_private_details),
+	country_code: ______schema_fields_js.countryCodeSchema.nullable().defined().meta(countryCodeMeta),
+	risk_scores: signUpRiskScoresSchema.defined().meta({ openapiField: {
+		description: "User risk scores used for sign-up risk evaluation.",
+		exampleValue: { sign_up: {
+			bot: 0,
+			free_trial_abuse: 0
+		} }
+	} }),
+	oauth_providers: ______schema_fields_js.yupArray(______schema_fields_js.yupObject({
+		...oauthProviderBaseFields,
+		email: ______schema_fields_js.yupString().nullable()
+	}).defined()).defined().meta(hiddenFieldMeta),
+	auth_with_email: ______schema_fields_js.yupBoolean().defined().meta({ openapiField: {
+		hidden: true,
+		description: "Whether the user can authenticate with their primary e-mail. If set to true, the user can log-in with credentials and/or magic link, if enabled in the project settings.",
+		exampleValue: true
+	} }),
+	requires_totp_mfa: ______schema_fields_js.yupBoolean().defined().meta({ openapiField: {
+		hidden: true,
+		description: "Whether the user is required to use TOTP MFA to sign in",
+		exampleValue: false
+	} })
+}).defined().test("restricted_reason_iff_restricted", "restricted_reason must be present if and only if is_restricted is true", function(value) {
+	if (value == null) return true;
+	return value.is_restricted === !!value.restricted_reason;
+}).test("restricted_by_admin_consistency", "When restricted_by_admin is not true, reason and private_details must be null", restrictedByAdminConsistencyTest);
+const usersCrudServerCreateSchema = usersCrudServerUpdateSchema.omit(["selected_team_id"]).concat(______schema_fields_js.yupObject({
+	oauth_providers: ______schema_fields_js.yupArray(______schema_fields_js.yupObject({
+		...oauthProviderBaseFields,
+		email: ______schema_fields_js.yupString().nullable().defined().default(null)
+	}).defined()).optional().meta(hiddenFieldMeta),
+	is_anonymous: ______schema_fields_js.yupBoolean().optional()
+}).defined());
+const usersCrudServerDeleteSchema = ______schema_fields_js.yupMixed();
+const usersCrud = (0, ______crud_js.createCrud)({
+	serverReadSchema: usersCrudServerReadSchema,
+	serverUpdateSchema: usersCrudServerUpdateSchema,
+	serverCreateSchema: usersCrudServerCreateSchema,
+	serverDeleteSchema: usersCrudServerDeleteSchema,
+	docs: {
+		serverCreate: {
+			tags: ["Users"],
+			summary: "Create user",
+			description: "Creates a new user. E-mail authentication is always enabled, and no password is set, meaning the only way to authenticate the newly created user is through magic link."
+		},
+		serverRead: {
+			tags: ["Users"],
+			summary: "Get user",
+			description: "Gets a user by user ID."
+		},
+		serverUpdate: {
+			tags: ["Users"],
+			summary: "Update user",
+			description: "Updates a user. Only the values provided will be updated."
+		},
+		serverDelete: {
+			tags: ["Users"],
+			summary: "Delete user",
+			description: "Deletes a user. Use this with caution."
+		},
+		serverList: {
+			tags: ["Users"],
+			summary: "List users",
+			description: "Lists all the users in the project. By default, only fully onboarded users are returned. Restricted users (those who haven't completed onboarding requirements like email verification) are included if `include_restricted` is set to `true`. Anonymous users are included if `include_anonymous` is set to `true` (which also includes restricted users)."
+		}
+	}
+});
+function userWebhookEvent(action, schema) {
+	return {
+		type: `user.${action}`,
+		schema,
+		metadata: {
+			summary: `User ${action[0].toUpperCase()}${action.slice(1)}`,
+			description: `This event is triggered when a user is ${action}.`,
+			tags: ["Users"]
+		}
+	};
+}
+const userCreatedWebhookEvent = userWebhookEvent("created", usersCrud.server.readSchema);
+const userUpdatedWebhookEvent = userWebhookEvent("updated", usersCrud.server.readSchema);
+const webhookUserDeletedSchema = ______schema_fields_js.yupObject({
+	id: ______schema_fields_js.userIdSchema.defined(),
+	teams: ______schema_fields_js.yupArray(______schema_fields_js.yupObject({ id: ______schema_fields_js.yupString().defined() })).defined()
+}).defined();
+const userDeletedWebhookEvent = userWebhookEvent("deleted", webhookUserDeletedSchema);
+
+//#endregion
+exports.riskScoreFieldSchema = riskScoreFieldSchema;
+exports.signUpRiskScoresSchema = signUpRiskScoresSchema;
+exports.userCreatedWebhookEvent = userCreatedWebhookEvent;
+exports.userDeletedWebhookEvent = userDeletedWebhookEvent;
+exports.userUpdatedWebhookEvent = userUpdatedWebhookEvent;
+exports.usersCrud = usersCrud;
+exports.usersCrudServerCreateSchema = usersCrudServerCreateSchema;
+exports.usersCrudServerDeleteSchema = usersCrudServerDeleteSchema;
+exports.usersCrudServerReadSchema = usersCrudServerReadSchema;
+exports.usersCrudServerUpdateSchema = usersCrudServerUpdateSchema;
+//# sourceMappingURL=users.js.map

package/dist/interface/crud/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","names":["fieldSchema","teamsCrudServerReadSchema"],"sources":["../../../src/interface/crud/users.ts"],"sourcesContent":["import type { InferType } from \"yup\";\nimport * as yup from \"yup\";\nimport { CrudTypeOf, createCrud } from \"../../crud\";\nimport * as fieldSchema from \"../../schema-fields\";\nimport { WebhookEvent } from \"../webhooks\";\nimport { teamsCrudServerReadSchema } from \"./teams\";\n\nconst restrictedByAdminMeta = {\n  restricted_by_admin: { openapiField: { description: 'Whether the user is restricted by an administrator. Can be set manually or by sign-up rules.', exampleValue: false } },\n  restricted_by_admin_reason: { openapiField: { description: 'Public reason shown to the user explaining why they are restricted. Optional.', exampleValue: null } },\n  restricted_by_admin_private_details: { openapiField: { description: 'Private details about the restriction (e.g., which sign-up rule triggered). Only visible to server access and above.', exampleValue: null } },\n} as const;\n\nconst countryCodeMeta = { openapiField: { description: 'Best-effort ISO country code captured at sign-up time from request geo headers.', exampleValue: \"US\" } } as const;\n\nexport const riskScoreFieldSchema = fieldSchema.yupNumber().integer().min(0).max(100).defined();\nexport const signUpRiskScoresSchema = fieldSchema.yupObject({\n  sign_up: fieldSchema.yupObject({\n    bot: riskScoreFieldSchema,\n    free_trial_abuse: riskScoreFieldSchema,\n  }).defined(),\n});\nexport type SignUpRiskScoresCrud = InferType<typeof signUpRiskScoresSchema>[\"sign_up\"];\n\nconst oauthProviderBaseFields = {\n  id: fieldSchema.yupString().defined(),\n  account_id: fieldSchema.yupString().defined(),\n};\nconst hiddenFieldMeta = { openapiField: { hidden: true } } as const;\n\nfunction restrictedByAdminConsistencyTest(this: yup.TestContext<any>, value: any) {\n  if (value == null) return true;\n  if (value.restricted_by_admin !== true) {\n    if (value.restricted_by_admin_reason != null) {\n      return this.createError({ message: \"restricted_by_admin_reason must be null when restricted_by_admin is not true\" });\n    }\n    if (value.restricted_by_admin_private_details != null) {\n      return this.createError({ message: \"restricted_by_admin_private_details must be null when restricted_by_admin is not true\" });\n    }\n  }\n  return true;\n}\n\nexport const usersCrudServerUpdateSchema = fieldSchema.yupObject({\n  display_name: fieldSchema.userDisplayNameSchema.optional(),\n  profile_image_url: fieldSchema.profileImageUrlSchema.nullable().optional(),\n  client_metadata: fieldSchema.userClientMetadataSchema.optional(),\n  client_read_only_metadata: fieldSchema.userClientReadOnlyMetadataSchema.optional(),\n  server_metadata: fieldSchema.userServerMetadataSchema.optional(),\n  primary_email: fieldSchema.primaryEmailSchema.nullable().optional().nonEmpty(),\n  primary_email_verified: fieldSchema.primaryEmailVerifiedSchema.optional(),\n  primary_email_auth_enabled: fieldSchema.primaryEmailAuthEnabledSchema.optional(),\n  passkey_auth_enabled: fieldSchema.userOtpAuthEnabledSchema.optional(),\n  password: fieldSchema.userPasswordMutationSchema.optional(),\n  password_hash: fieldSchema.userPasswordHashMutationSchema.optional(),\n  otp_auth_enabled: fieldSchema.userOtpAuthEnabledMutationSchema.optional(),\n  totp_secret_base64: fieldSchema.userTotpSecretMutationSchema.optional(),\n  selected_team_id: fieldSchema.selectedTeamIdSchema.nullable().optional(),\n  is_anonymous: fieldSchema.yupBoolean().oneOf([false]).optional(),\n  restricted_by_admin: fieldSchema.yupBoolean().optional().meta(restrictedByAdminMeta.restricted_by_admin),\n  restricted_by_admin_reason: fieldSchema.yupString().nullable().optional().meta(restrictedByAdminMeta.restricted_by_admin_reason),\n  restricted_by_admin_private_details: fieldSchema.yupString().nullable().optional().meta(restrictedByAdminMeta.restricted_by_admin_private_details),\n  country_code: fieldSchema.countryCodeSchema.nullable().optional().meta(countryCodeMeta),\n  risk_scores: signUpRiskScoresSchema.optional(),\n}).defined().test(\n  \"restricted_by_admin_consistency\",\n  \"When restricted_by_admin is not true, reason and private_details must be null\",\n  restrictedByAdminConsistencyTest,\n);\n\nexport const usersCrudServerReadSchema = fieldSchema.yupObject({\n  id: fieldSchema.userIdSchema.defined(),\n  primary_email: fieldSchema.primaryEmailSchema.nullable().defined(),\n  primary_email_verified: fieldSchema.primaryEmailVerifiedSchema.defined(),\n  primary_email_auth_enabled: fieldSchema.primaryEmailAuthEnabledSchema.defined(),\n  display_name: fieldSchema.userDisplayNameSchema.nullable().defined(),\n  selected_team: teamsCrudServerReadSchema.nullable().defined(),\n  selected_team_id: fieldSchema.selectedTeamIdSchema.nullable().defined(),\n  profile_image_url: fieldSchema.profileImageUrlSchema.nullable().defined(),\n  signed_up_at_millis: fieldSchema.signedUpAtMillisSchema.defined(),\n  has_password: fieldSchema.userHasPasswordSchema.defined(),\n  otp_auth_enabled: fieldSchema.userOtpAuthEnabledSchema.defined(),\n  passkey_auth_enabled: fieldSchema.userOtpAuthEnabledSchema.defined(),\n  client_metadata: fieldSchema.userClientMetadataSchema,\n  client_read_only_metadata: fieldSchema.userClientReadOnlyMetadataSchema,\n  server_metadata: fieldSchema.userServerMetadataSchema,\n  last_active_at_millis: fieldSchema.userLastActiveAtMillisSchema.nonNullable().defined(),\n  is_anonymous: fieldSchema.yupBoolean().defined(),\n  is_restricted: fieldSchema.yupBoolean().defined().meta({ openapiField: { description: 'Whether the user is in restricted state (has signed up but not completed onboarding requirements)', exampleValue: false } }),\n  restricted_reason: fieldSchema.restrictedReasonSchema.nullable().defined().meta({ openapiField: { description: 'The reason why the user is restricted (e.g., type: \"email_not_verified\", \"anonymous\", or \"restricted_by_administrator\"), null if not restricted', exampleValue: null } }),\n  restricted_by_admin: fieldSchema.yupBoolean().defined().meta(restrictedByAdminMeta.restricted_by_admin),\n  restricted_by_admin_reason: fieldSchema.yupString().nullable().defined().meta(restrictedByAdminMeta.restricted_by_admin_reason),\n  restricted_by_admin_private_details: fieldSchema.yupString().nullable().defined().meta(restrictedByAdminMeta.restricted_by_admin_private_details),\n  country_code: fieldSchema.countryCodeSchema.nullable().defined().meta(countryCodeMeta),\n  risk_scores: signUpRiskScoresSchema.defined().meta({ openapiField: { description: 'User risk scores used for sign-up risk evaluation.', exampleValue: { sign_up: { bot: 0, free_trial_abuse: 0 } } } }),\n\n  oauth_providers: fieldSchema.yupArray(fieldSchema.yupObject({\n    ...oauthProviderBaseFields,\n    email: fieldSchema.yupString().nullable(),\n  }).defined()).defined().meta(hiddenFieldMeta),\n\n  /**\n   * @deprecated\n   */\n  auth_with_email: fieldSchema.yupBoolean().defined().meta({ openapiField: { hidden: true, description: 'Whether the user can authenticate with their primary e-mail. If set to true, the user can log-in with credentials and/or magic link, if enabled in the project settings.', exampleValue: true } }),\n  /**\n   * @deprecated\n   */\n  requires_totp_mfa: fieldSchema.yupBoolean().defined().meta({ openapiField: { hidden: true, description: 'Whether the user is required to use TOTP MFA to sign in', exampleValue: false } }),\n}).defined().test(\"restricted_reason_iff_restricted\", \"restricted_reason must be present if and only if is_restricted is true\", function(this: yup.TestContext<any>, value: any) {\n  if (value == null) return true;\n  return value.is_restricted === !!value.restricted_reason;\n}).test(\n  \"restricted_by_admin_consistency\",\n  \"When restricted_by_admin is not true, reason and private_details must be null\",\n  restrictedByAdminConsistencyTest,\n);\n\nexport const usersCrudServerCreateSchema = usersCrudServerUpdateSchema.omit(['selected_team_id']).concat(fieldSchema.yupObject({\n  oauth_providers: fieldSchema.yupArray(fieldSchema.yupObject({\n    ...oauthProviderBaseFields,\n    email: fieldSchema.yupString().nullable().defined().default(null),\n  }).defined()).optional().meta(hiddenFieldMeta),\n  is_anonymous: fieldSchema.yupBoolean().optional(),\n}).defined());\n\nexport const usersCrudServerDeleteSchema = fieldSchema.yupMixed();\n\nexport const usersCrud = createCrud({\n  serverReadSchema: usersCrudServerReadSchema,\n  serverUpdateSchema: usersCrudServerUpdateSchema,\n  serverCreateSchema: usersCrudServerCreateSchema,\n  serverDeleteSchema: usersCrudServerDeleteSchema,\n  docs: {\n    serverCreate: {\n      tags: [\"Users\"],\n      summary: 'Create user',\n      description: 'Creates a new user. E-mail authentication is always enabled, and no password is set, meaning the only way to authenticate the newly created user is through magic link.',\n    },\n    serverRead: {\n      tags: [\"Users\"],\n      summary: 'Get user',\n      description: 'Gets a user by user ID.',\n    },\n    serverUpdate: {\n      tags: [\"Users\"],\n      summary: 'Update user',\n      description: 'Updates a user. Only the values provided will be updated.',\n    },\n    serverDelete: {\n      tags: [\"Users\"],\n      summary: 'Delete user',\n      description: 'Deletes a user. Use this with caution.',\n    },\n    serverList: {\n      tags: [\"Users\"],\n      summary: 'List users',\n      description: 'Lists all the users in the project. By default, only fully onboarded users are returned. Restricted users (those who haven\\'t completed onboarding requirements like email verification) are included if `include_restricted` is set to `true`. Anonymous users are included if `include_anonymous` is set to `true` (which also includes restricted users).',\n    },\n  },\n});\nexport type UsersCrud = CrudTypeOf<typeof usersCrud>;\n\nfunction userWebhookEvent<S extends yup.Schema>(action: string, schema: S): WebhookEvent<S> {\n  return {\n    type: `user.${action}`,\n    schema,\n    metadata: {\n      summary: `User ${action[0].toUpperCase()}${action.slice(1)}`,\n      description: `This event is triggered when a user is ${action}.`,\n      tags: [\"Users\"],\n    },\n  };\n}\n\nexport const userCreatedWebhookEvent = userWebhookEvent(\"created\", usersCrud.server.readSchema);\nexport const userUpdatedWebhookEvent = userWebhookEvent(\"updated\", usersCrud.server.readSchema);\n\nconst webhookUserDeletedSchema = fieldSchema.yupObject({\n  id: fieldSchema.userIdSchema.defined(),\n  teams: fieldSchema.yupArray(fieldSchema.yupObject({\n    id: fieldSchema.yupString().defined(),\n  })).defined(),\n}).defined();\nexport const userDeletedWebhookEvent = userWebhookEvent(\"deleted\", webhookUserDeletedSchema);\n"],"mappings":";;;;;;;;AAOA,MAAM,wBAAwB;CAC5B,qBAAqB,EAAE,cAAc;EAAE,aAAa;EAAgG,cAAc;EAAO,EAAE;CAC3K,4BAA4B,EAAE,cAAc;EAAE,aAAa;EAAiF,cAAc;EAAM,EAAE;CAClK,qCAAqC,EAAE,cAAc;EAAE,aAAa;EAAwH,cAAc;EAAM,EAAE;CACnN;AAED,MAAM,kBAAkB,EAAE,cAAc;CAAE,aAAa;CAAmF,cAAc;CAAM,EAAE;AAEhK,MAAa,uBAAuBA,uBAAY,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS;AAC/F,MAAa,yBAAyBA,uBAAY,UAAU,EAC1D,SAASA,uBAAY,UAAU;CAC7B,KAAK;CACL,kBAAkB;CACnB,CAAC,CAAC,SAAS,EACb,CAAC;AAGF,MAAM,0BAA0B;CAC9B,IAAIA,uBAAY,WAAW,CAAC,SAAS;CACrC,YAAYA,uBAAY,WAAW,CAAC,SAAS;CAC9C;AACD,MAAM,kBAAkB,EAAE,cAAc,EAAE,QAAQ,MAAM,EAAE;AAE1D,SAAS,iCAA6D,OAAY;AAChF,KAAI,SAAS,KAAM,QAAO;AAC1B,KAAI,MAAM,wBAAwB,MAAM;AACtC,MAAI,MAAM,8BAA8B,KACtC,QAAO,KAAK,YAAY,EAAE,SAAS,gFAAgF,CAAC;AAEtH,MAAI,MAAM,uCAAuC,KAC/C,QAAO,KAAK,YAAY,EAAE,SAAS,yFAAyF,CAAC;;AAGjI,QAAO;;AAGT,MAAa,8BAA8BA,uBAAY,UAAU;CAC/D,cAAcA,uBAAY,sBAAsB,UAAU;CAC1D,mBAAmBA,uBAAY,sBAAsB,UAAU,CAAC,UAAU;CAC1E,iBAAiBA,uBAAY,yBAAyB,UAAU;CAChE,2BAA2BA,uBAAY,iCAAiC,UAAU;CAClF,iBAAiBA,uBAAY,yBAAyB,UAAU;CAChE,eAAeA,uBAAY,mBAAmB,UAAU,CAAC,UAAU,CAAC,UAAU;CAC9E,wBAAwBA,uBAAY,2BAA2B,UAAU;CACzE,4BAA4BA,uBAAY,8BAA8B,UAAU;CAChF,sBAAsBA,uBAAY,yBAAyB,UAAU;CACrE,UAAUA,uBAAY,2BAA2B,UAAU;CAC3D,eAAeA,uBAAY,+BAA+B,UAAU;CACpE,kBAAkBA,uBAAY,iCAAiC,UAAU;CACzE,oBAAoBA,uBAAY,6BAA6B,UAAU;CACvE,kBAAkBA,uBAAY,qBAAqB,UAAU,CAAC,UAAU;CACxE,cAAcA,uBAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU;CAChE,qBAAqBA,uBAAY,YAAY,CAAC,UAAU,CAAC,KAAK,sBAAsB,oBAAoB;CACxG,4BAA4BA,uBAAY,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,sBAAsB,2BAA2B;CAChI,qCAAqCA,uBAAY,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,sBAAsB,oCAAoC;CAClJ,cAAcA,uBAAY,kBAAkB,UAAU,CAAC,UAAU,CAAC,KAAK,gBAAgB;CACvF,aAAa,uBAAuB,UAAU;CAC/C,CAAC,CAAC,SAAS,CAAC,KACX,mCACA,iFACA,iCACD;AAED,MAAa,4BAA4BA,uBAAY,UAAU;CAC7D,IAAIA,uBAAY,aAAa,SAAS;CACtC,eAAeA,uBAAY,mBAAmB,UAAU,CAAC,SAAS;CAClE,wBAAwBA,uBAAY,2BAA2B,SAAS;CACxE,4BAA4BA,uBAAY,8BAA8B,SAAS;CAC/E,cAAcA,uBAAY,sBAAsB,UAAU,CAAC,SAAS;CACpE,eAAeC,qCAA0B,UAAU,CAAC,SAAS;CAC7D,kBAAkBD,uBAAY,qBAAqB,UAAU,CAAC,SAAS;CACvE,mBAAmBA,uBAAY,sBAAsB,UAAU,CAAC,SAAS;CACzE,qBAAqBA,uBAAY,uBAAuB,SAAS;CACjE,cAAcA,uBAAY,sBAAsB,SAAS;CACzD,kBAAkBA,uBAAY,yBAAyB,SAAS;CAChE,sBAAsBA,uBAAY,yBAAyB,SAAS;CACpE,iBAAiBA,uBAAY;CAC7B,2BAA2BA,uBAAY;CACvC,iBAAiBA,uBAAY;CAC7B,uBAAuBA,uBAAY,6BAA6B,aAAa,CAAC,SAAS;CACvF,cAAcA,uBAAY,YAAY,CAAC,SAAS;CAChD,eAAeA,uBAAY,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc;EAAE,aAAa;EAAqG,cAAc;EAAO,EAAE,CAAC;CACnN,mBAAmBA,uBAAY,uBAAuB,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc;EAAE,aAAa;EAAmJ,cAAc;EAAM,EAAE,CAAC;CACzR,qBAAqBA,uBAAY,YAAY,CAAC,SAAS,CAAC,KAAK,sBAAsB,oBAAoB;CACvG,4BAA4BA,uBAAY,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,sBAAsB,2BAA2B;CAC/H,qCAAqCA,uBAAY,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,sBAAsB,oCAAoC;CACjJ,cAAcA,uBAAY,kBAAkB,UAAU,CAAC,SAAS,CAAC,KAAK,gBAAgB;CACtF,aAAa,uBAAuB,SAAS,CAAC,KAAK,EAAE,cAAc;EAAE,aAAa;EAAsD,cAAc,EAAE,SAAS;GAAE,KAAK;GAAG,kBAAkB;GAAG,EAAE;EAAE,EAAE,CAAC;CAEvM,iBAAiBA,uBAAY,SAASA,uBAAY,UAAU;EAC1D,GAAG;EACH,OAAOA,uBAAY,WAAW,CAAC,UAAU;EAC1C,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,KAAK,gBAAgB;CAK7C,iBAAiBA,uBAAY,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc;EAAE,QAAQ;EAAM,aAAa;EAA4K,cAAc;EAAM,EAAE,CAAC;CAIzS,mBAAmBA,uBAAY,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc;EAAE,QAAQ;EAAM,aAAa;EAA2D,cAAc;EAAO,EAAE,CAAC;CAC5L,CAAC,CAAC,SAAS,CAAC,KAAK,oCAAoC,0EAA0E,SAAqC,OAAY;AAC/K,KAAI,SAAS,KAAM,QAAO;AAC1B,QAAO,MAAM,kBAAkB,CAAC,CAAC,MAAM;EACvC,CAAC,KACD,mCACA,iFACA,iCACD;AAED,MAAa,8BAA8B,4BAA4B,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAOA,uBAAY,UAAU;CAC7H,iBAAiBA,uBAAY,SAASA,uBAAY,UAAU;EAC1D,GAAG;EACH,OAAOA,uBAAY,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,KAAK;EAClE,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,KAAK,gBAAgB;CAC9C,cAAcA,uBAAY,YAAY,CAAC,UAAU;CAClD,CAAC,CAAC,SAAS,CAAC;AAEb,MAAa,8BAA8BA,uBAAY,UAAU;AAEjE,MAAa,0CAAuB;CAClC,kBAAkB;CAClB,oBAAoB;CACpB,oBAAoB;CACpB,oBAAoB;CACpB,MAAM;EACJ,cAAc;GACZ,MAAM,CAAC,QAAQ;GACf,SAAS;GACT,aAAa;GACd;EACD,YAAY;GACV,MAAM,CAAC,QAAQ;GACf,SAAS;GACT,aAAa;GACd;EACD,cAAc;GACZ,MAAM,CAAC,QAAQ;GACf,SAAS;GACT,aAAa;GACd;EACD,cAAc;GACZ,MAAM,CAAC,QAAQ;GACf,SAAS;GACT,aAAa;GACd;EACD,YAAY;GACV,MAAM,CAAC,QAAQ;GACf,SAAS;GACT,aAAa;GACd;EACF;CACF,CAAC;AAGF,SAAS,iBAAuC,QAAgB,QAA4B;AAC1F,QAAO;EACL,MAAM,QAAQ;EACd;EACA,UAAU;GACR,SAAS,QAAQ,OAAO,GAAG,aAAa,GAAG,OAAO,MAAM,EAAE;GAC1D,aAAa,0CAA0C,OAAO;GAC9D,MAAM,CAAC,QAAQ;GAChB;EACF;;AAGH,MAAa,0BAA0B,iBAAiB,WAAW,UAAU,OAAO,WAAW;AAC/F,MAAa,0BAA0B,iBAAiB,WAAW,UAAU,OAAO,WAAW;AAE/F,MAAM,2BAA2BA,uBAAY,UAAU;CACrD,IAAIA,uBAAY,aAAa,SAAS;CACtC,OAAOA,uBAAY,SAASA,uBAAY,UAAU,EAChD,IAAIA,uBAAY,WAAW,CAAC,SAAS,EACtC,CAAC,CAAC,CAAC,SAAS;CACd,CAAC,CAAC,SAAS;AACZ,MAAa,0BAA0B,iBAAiB,WAAW,yBAAyB"}

package/dist/interface/handler-urls.d.ts

@@ -0,0 +1,51 @@
+import { CustomPagePrompt, PageComponentKey, PageVersionEntry, PageVersions, getCustomPagePrompts, getLatestPageVersions } from "./page-component-versions.js";
+
+//#region src/interface/handler-urls.d.ts
+/**
+ * @deprecated Plain string URLs are deprecated. Use `{ type: "custom", url: "...", version: 0 }` instead.
+ */
+type DeprecatedStringUrl = string;
+type HandlerPageUrls = Record<"handler" | "signIn" | "signUp" | "signOut" | "emailVerification" | "passwordReset" | "forgotPassword" | "oauthCallback" | "magicLinkCallback" | "accountSettings" | "teamInvitation" | "cliAuthConfirm" | "mfa" | "error" | "onboarding", DeprecatedStringUrl | {
+  type: "custom";
+  url: string;
+  version: number;
+} | {
+  type: "hosted" | "handler-component";
+}>;
+type HandlerRedirectUrls = Record<"afterSignIn" | "afterSignUp" | "afterSignOut" | "home", string>;
+type HandlerUrls = HandlerPageUrls & HandlerRedirectUrls;
+type HandlerUrlTarget = HandlerUrls[keyof HandlerUrls];
+/**
+ * The default handler URL target, applied to any key not explicitly set.
+ *
+ * - `{ type: "handler-component" }` — render the page inside the local `StackHandler` component (current default, may change in the next breaking version).
+ * - `{ type: "hosted" }` — redirect to Stack's hosted auth pages.
+ */
+type DefaultHandlerUrlTarget = {
+  type: "hosted" | "handler-component";
+};
+/**
+ * Configuration for where each auth page/redirect lives.
+ *
+ * **`default`** — fallback target for every key not set individually:
+ *   - `{ type: "handler-component" }` — use the local `StackHandler` (current default, may change in the next breaking version).
+ *   - `{ type: "hosted" }` — use Stack's hosted auth pages.
+ *
+ * **Page keys** (`signIn`, `signUp`, `signOut`, `emailVerification`, `passwordReset`,
+ * `forgotPassword`, `oauthCallback`, `magicLinkCallback`, `accountSettings`,
+ * `teamInvitation`, `cliAuthConfirm`, `mfa`, `error`, `onboarding`, `handler`):
+ *   - A URL string (e.g. `"/my-sign-in"`) — custom path.
+ *   - `{ type: "custom", url: "...", version: 0 }` — custom URL with version tracking.
+ *   - `{ type: "hosted" }` — Stack's hosted page.
+ *   - `{ type: "handler-component" }` — local `StackHandler`.
+ *
+ * **Redirect keys** (`afterSignIn`, `afterSignUp`, `afterSignOut`, `home`):
+ *   - A URL string (e.g. `"/dashboard"`) — where to redirect after the action.
+ */
+type HandlerUrlOptions = Partial<HandlerUrls> & {
+  default?: DefaultHandlerUrlTarget;
+};
+type ResolvedHandlerUrls = { [K in keyof HandlerUrls]: string };
+//#endregion
+export { type CustomPagePrompt, DefaultHandlerUrlTarget, HandlerPageUrls, HandlerRedirectUrls, HandlerUrlOptions, HandlerUrlTarget, HandlerUrls, type PageComponentKey, type PageVersionEntry, type PageVersions, ResolvedHandlerUrls, getCustomPagePrompts, getLatestPageVersions };
+//# sourceMappingURL=handler-urls.d.ts.map

package/dist/interface/handler-urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-urls.d.ts","names":[],"sources":["../../src/interface/handler-urls.ts"],"mappings":";;;;;;KAGK,mBAAA;AAAA,KAEO,eAAA,GAAkB,MAAA,4OAgB5B,mBAAA;EAAwB,IAAA;EAAgB,GAAA;EAAa,OAAA;AAAA;EAAsB,IAAA;AAAA;AAAA,KAGjE,mBAAA,GAAsB,MAAA;AAAA,KAQtB,WAAA,GAAc,eAAA,GAAkB,mBAAA;AAAA,KAChC,gBAAA,GAAmB,WAAA,OAAkB,WAAA;;;;;;;KAQrC,uBAAA;EAA4B,IAAA;AAAA;;;AATxC;;;;;AACA;;;;;AAQA;;;;;AAoBA;KAAY,iBAAA,GAAoB,OAAA,CAAQ,WAAA;EAAiB,OAAA,GAAU,uBAAA;AAAA;AAAA,KACvD,mBAAA,iBACE,WAAA"}

package/dist/interface/handler-urls.js

@@ -0,0 +1,16 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BE-pF4vm.js');
+let __page_component_versions_js = require("./page-component-versions.js");
+
+Object.defineProperty(exports, 'getCustomPagePrompts', {
+  enumerable: true,
+  get: function () {
+    return __page_component_versions_js.getCustomPagePrompts;
+  }
+});
+Object.defineProperty(exports, 'getLatestPageVersions', {
+  enumerable: true,
+  get: function () {
+    return __page_component_versions_js.getLatestPageVersions;
+  }
+});

package/dist/interface/page-component-versions.d.ts

@@ -0,0 +1,25 @@
+import { HandlerPageUrls } from "./handler-urls.js";
+
+//#region src/interface/page-component-versions.d.ts
+type PageVersionEntry = {
+  minSdkVersion: `${number}.${number}.${number}`;
+  upgradePrompt: string;
+  changelog: string;
+};
+type PageVersions = Record<number, PageVersionEntry> & {
+  1: PageVersionEntry;
+};
+type PageComponentKey = Exclude<keyof HandlerPageUrls, "handler">;
+type CustomPagePrompt = {
+  title: string;
+  fullPrompt: string;
+  versions: PageVersions;
+};
+declare function getCustomPagePrompts(): Record<PageComponentKey, CustomPagePrompt>;
+declare function getLatestPageVersions(): Record<string, {
+  version: number;
+  changelogs: Record<number, string>;
+}>;
+//#endregion
+export { CustomPagePrompt, PageComponentKey, PageVersionEntry, PageVersions, getCustomPagePrompts, getLatestPageVersions };
+//# sourceMappingURL=page-component-versions.d.ts.map

package/dist/interface/page-component-versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-component-versions.d.ts","names":[],"sources":["../../src/interface/page-component-versions.ts"],"mappings":";;;KAmBY,gBAAA;EACV,aAAA;EACA,aAAA;EACA,SAAA;AAAA;AAAA,KAGU,YAAA,GAAe,MAAA,SAAe,gBAAA;EAAsB,CAAA,EAAG,gBAAA;AAAA;AAAA,KAEvD,gBAAA,GAAmB,OAAA,OAAc,eAAA;AAAA,KAEjC,gBAAA;EACV,KAAA;EACA,UAAA;EACA,QAAA,EAAU,YAAA;AAAA;AAAA,iBAySI,oBAAA,CAAA,GAAwB,MAAA,CAAO,gBAAA,EAAkB,gBAAA;AAAA,iBA80CjD,qBAAA,CAAA,GAAyB,MAAA;EAAiB,OAAA;EAAiB,UAAA,EAAY,MAAA;AAAA"}