@kaiz11/stack-client 0.0.14

package/dist/auth/types.d.ts

@@ -0,0 +1,412 @@
+/**
+ * Email and password credentials
+ */
+export interface EmailPasswordCredentials {
+    email: string;
+    password: string;
+}
+/**
+ * Sign up options
+ */
+export interface SignUpOptions extends EmailPasswordCredentials {
+    /** User metadata (name, avatar, etc.) */
+    data?: Record<string, unknown>;
+}
+/**
+ * OAuth provider names
+ */
+export type OAuthProvider = "google" | "github" | "gitlab" | "bitbucket" | "azure" | "facebook" | "twitter" | "discord" | "twitch" | "spotify" | "slack" | "linkedin" | "notion" | "apple" | "zoom" | "figma" | "workos" | "keycloak";
+/**
+ * OAuth sign in options
+ */
+export interface OAuthSignInOptions {
+    /** OAuth provider */
+    provider: OAuthProvider;
+    /** URL to redirect to after sign in */
+    redirectTo?: string;
+    /** OAuth scopes to request */
+    scopes?: string;
+    /** Additional query params */
+    queryParams?: Record<string, string>;
+    /** Skip browser redirect (return URL instead) */
+    skipBrowserRedirect?: boolean;
+}
+/**
+ * OAuth callback result
+ */
+export interface OAuthCallbackResult {
+    session: Session | null;
+    error: Error | null;
+}
+/**
+ * Magic link options
+ */
+export interface MagicLinkOptions {
+    email: string;
+    /** URL to redirect to after clicking the link */
+    redirectTo?: string;
+    /** Whether to create user if they don't exist (default: false) */
+    shouldCreateUser?: boolean;
+    /** Custom data to include */
+    data?: Record<string, unknown>;
+}
+/**
+ * OTP (one-time password) options
+ */
+export interface OtpSignInOptions {
+    /** Email or phone number */
+    email?: string;
+    phone?: string;
+    /** URL to redirect to (for email OTP with link) */
+    redirectTo?: string;
+    /** Whether to create user if they don't exist */
+    shouldCreateUser?: boolean;
+    /** Custom data to include */
+    data?: Record<string, unknown>;
+}
+/**
+ * OTP verification options
+ */
+export interface OtpVerifyOptions {
+    /** Email or phone used for OTP */
+    email?: string;
+    phone?: string;
+    /** The OTP code */
+    token: string;
+    /** Type of OTP */
+    type: "sms" | "email" | "phone_change" | "email_change";
+}
+/**
+ * Password reset options
+ */
+export interface PasswordResetOptions {
+    email: string;
+    /** URL to redirect to after clicking reset link */
+    redirectTo?: string;
+}
+/**
+ * Update password options
+ */
+export interface UpdatePasswordOptions {
+    password: string;
+    /** Nonce from reauthentication (for sensitive operations) */
+    nonce?: string;
+}
+/**
+ * Reauthentication options
+ */
+export interface ReauthenticateOptions {
+    /** Current password for reauthentication */
+    password?: string;
+}
+/**
+ * Logout scope
+ */
+export type LogoutScope = "local" | "global";
+/**
+ * User identity (linked OAuth account)
+ */
+export interface UserIdentity {
+    id: string;
+    userId: string;
+    provider: string;
+    identityId: string;
+    identityData: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+    lastSignInAt: string | null;
+}
+/**
+ * User object (normalized from GoTrueUser)
+ */
+export interface User {
+    id: string;
+    email: string | null;
+    phone: string | null;
+    emailConfirmedAt: string | null;
+    phoneConfirmedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    appMetadata: {
+        provider?: string;
+        providers?: string[];
+    };
+    userMetadata: Record<string, unknown>;
+    identities?: UserIdentity[];
+    factors?: Factor[];
+}
+/**
+ * Session object
+ */
+export interface Session {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    expiresAt: number;
+    tokenType: string;
+    user: User;
+}
+/**
+ * Update user options
+ */
+export interface UpdateUserOptions {
+    email?: string;
+    phone?: string;
+    password?: string;
+    /** User metadata */
+    data?: Record<string, unknown>;
+    /** Nonce from reauthentication (required for email/phone/password changes) */
+    nonce?: string;
+}
+/**
+ * MFA factor types
+ */
+export type FactorType = "totp" | "phone";
+/**
+ * MFA factor status
+ */
+export type FactorStatus = "unverified" | "verified";
+/**
+ * MFA factor
+ */
+export interface Factor {
+    id: string;
+    type: FactorType;
+    friendlyName?: string;
+    status: FactorStatus;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * MFA enrollment options
+ */
+export interface EnrollFactorOptions {
+    /** Factor type */
+    type: FactorType;
+    /** Friendly name for the factor */
+    friendlyName?: string;
+    /** Phone number (required for phone factor) */
+    phone?: string;
+}
+/**
+ * MFA enrollment result
+ */
+export interface EnrollFactorResult {
+    /** Factor ID */
+    id: string;
+    /** Factor type */
+    type: FactorType;
+    /** TOTP URI (for totp type) */
+    totpUri?: string;
+    /** QR code data URL (for totp type) */
+    qrCode?: string;
+    /** Recovery codes */
+    recoveryCodes?: string[];
+}
+/**
+ * MFA challenge options
+ */
+export interface ChallengeFactorOptions {
+    /** Factor ID to challenge */
+    factorId: string;
+    /** Channel to send challenge (for phone factor) */
+    channel?: "sms" | "whatsapp";
+}
+/**
+ * MFA challenge result
+ */
+export interface ChallengeFactorResult {
+    /** Challenge ID */
+    id: string;
+    /** Expiration timestamp */
+    expiresAt: number;
+}
+/**
+ * MFA verify options
+ */
+export interface VerifyFactorOptions {
+    /** Factor ID */
+    factorId: string;
+    /** Challenge ID */
+    challengeId: string;
+    /** Verification code */
+    code: string;
+}
+/**
+ * Link identity options
+ */
+export interface LinkIdentityOptions {
+    /** OAuth provider to link */
+    provider: OAuthProvider;
+    /** URL to redirect to after linking */
+    redirectTo?: string;
+    /** OAuth scopes to request */
+    scopes?: string;
+}
+/**
+ * Unlink identity options
+ */
+export interface UnlinkIdentityOptions {
+    /** Identity ID to unlink */
+    identityId: string;
+}
+/**
+ * Verify email/phone options
+ */
+export interface VerifyOptions {
+    /** Verification token from URL */
+    token: string;
+    /** Type of verification */
+    type: "signup" | "email_change" | "phone_change" | "recovery" | "invite";
+    /** Email (for email verification) */
+    email?: string;
+    /** Phone (for phone verification) */
+    phone?: string;
+}
+/**
+ * Resend verification options
+ */
+export interface ResendVerificationOptions {
+    /** Email or phone to resend to */
+    email?: string;
+    phone?: string;
+    /** Type of verification to resend */
+    type: "signup" | "email_change" | "phone_change";
+    /** URL to redirect to */
+    redirectTo?: string;
+}
+/**
+ * Auth state change event
+ */
+export type AuthChangeEvent = "SIGNED_IN" | "SIGNED_OUT" | "TOKEN_REFRESHED" | "USER_UPDATED" | "MFA_CHALLENGE_VERIFIED" | "PASSWORD_RECOVERY";
+/**
+ * Auth state change callback
+ */
+export type AuthChangeCallback = (event: AuthChangeEvent, session: Session | null) => void;
+/**
+ * Unsubscribe function
+ */
+export type Unsubscribe = () => void;
+/**
+ * GoTrue token response
+ */
+export interface GoTrueTokenResponse {
+    access_token: string;
+    refresh_token: string;
+    expires_in: number;
+    expires_at: number;
+    token_type: string;
+    user: GoTrueUser;
+}
+/**
+ * GoTrue signup response (may or may not include session)
+ * When email verification is required, only user info is returned.
+ * When auto-confirm is enabled, full token response is returned.
+ */
+export interface GoTrueSignUpResponse {
+    id: string;
+    email?: string;
+    phone?: string;
+    created_at: string;
+    updated_at: string;
+    app_metadata: Record<string, unknown>;
+    user_metadata: Record<string, unknown>;
+    identities?: GoTrueIdentity[];
+    access_token?: string;
+    refresh_token?: string;
+    expires_in?: number;
+    expires_at?: number;
+    token_type?: string;
+    user?: GoTrueUser;
+}
+/**
+ * Signup result - either a full session or just user info (email verification pending)
+ */
+export interface SignUpResult {
+    /** Session (only present if auto-confirm enabled or mock mode) */
+    session: Session | null;
+    /** User info (always present) */
+    user: User;
+}
+/**
+ * GoTrue user object
+ */
+export interface GoTrueUser {
+    id: string;
+    aud: string;
+    email?: string;
+    phone?: string;
+    email_confirmed_at?: string;
+    phone_confirmed_at?: string;
+    created_at: string;
+    updated_at: string;
+    app_metadata: {
+        provider?: string;
+        providers?: string[];
+    };
+    user_metadata: Record<string, unknown>;
+    role?: string;
+    identities?: GoTrueIdentity[];
+    factors?: GoTrueFactor[];
+}
+/**
+ * GoTrue identity
+ */
+export interface GoTrueIdentity {
+    id: string;
+    user_id: string;
+    provider: string;
+    identity_id: string;
+    identity_data: Record<string, unknown>;
+    created_at: string;
+    updated_at: string;
+    last_sign_in_at?: string;
+}
+/**
+ * GoTrue factor
+ */
+export interface GoTrueFactor {
+    id: string;
+    factor_type: FactorType;
+    friendly_name?: string;
+    status: FactorStatus;
+    created_at: string;
+    updated_at: string;
+}
+/**
+ * Auth settings (public)
+ */
+export interface AuthSettings {
+    /** Whether email signup is enabled */
+    disableSignup: boolean;
+    /** External OAuth providers enabled */
+    externalProviders: OAuthProvider[];
+    /** Whether phone auth is enabled */
+    phoneEnabled: boolean;
+    /** Whether email auth is enabled */
+    emailEnabled: boolean;
+    /** Whether SAML is enabled */
+    samlEnabled: boolean;
+    /** MFA settings */
+    mfa: {
+        enabled: boolean;
+        factorTypes: FactorType[];
+    };
+}
+/**
+ * Convert GoTrueIdentity to UserIdentity
+ */
+export declare function normalizeIdentity(identity: GoTrueIdentity): UserIdentity;
+/**
+ * Convert GoTrueFactor to Factor
+ */
+export declare function normalizeFactor(factor: GoTrueFactor): Factor;
+/**
+ * Convert GoTrueUser to User
+ */
+export declare function normalizeUser(gotrueUser: GoTrueUser): User;
+/**
+ * Convert GoTrueTokenResponse to Session
+ */
+export declare function normalizeSession(response: GoTrueTokenResponse): Session;
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAc,SAAQ,wBAAwB;IAC7D,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,OAAO,GACP,UAAU,GACV,SAAS,GACT,SAAS,GACT,QAAQ,GACR,SAAS,GACT,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,MAAM,GACN,OAAO,GACP,QAAQ,GACR,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,qBAAqB;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;AAM7C;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kBAAkB;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,mCAAmC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,QAAQ,EAAE,aAAa,CAAC;IACxB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzE,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,cAAc,CAAC;IACjD,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,cAAc,GACd,wBAAwB,GACxB,mBAAmB,CAAC;AAExB;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,OAAO,GAAG,IAAI,KACpB,IAAI,CAAC;AAEV;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAMrC;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAE9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,iCAAiC;IACjC,IAAI,EAAE,IAAI,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,aAAa,EAAE,OAAO,CAAC;IACvB,uCAAuC;IACvC,iBAAiB,EAAE,aAAa,EAAE,CAAC;IACnC,oCAAoC;IACpC,YAAY,EAAE,OAAO,CAAC;IACtB,oCAAoC;IACpC,YAAY,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,WAAW,EAAE,OAAO,CAAC;IACrB,mBAAmB;IACnB,GAAG,EAAE;QACH,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,UAAU,EAAE,CAAC;KAC3B,CAAC;CACH;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,YAAY,CAWxE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAS5D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAc1D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CASvE"}

package/dist/auth/types.js

@@ -0,0 +1,66 @@
+// ============================================
+// Credentials & Sign In Options
+// ============================================
+// ============================================
+// Normalizers
+// ============================================
+/**
+ * Convert GoTrueIdentity to UserIdentity
+ */
+export function normalizeIdentity(identity) {
+    return {
+        id: identity.id,
+        userId: identity.user_id,
+        provider: identity.provider,
+        identityId: identity.identity_id,
+        identityData: identity.identity_data,
+        createdAt: identity.created_at,
+        updatedAt: identity.updated_at,
+        lastSignInAt: identity.last_sign_in_at ?? null,
+    };
+}
+/**
+ * Convert GoTrueFactor to Factor
+ */
+export function normalizeFactor(factor) {
+    return {
+        id: factor.id,
+        type: factor.factor_type,
+        friendlyName: factor.friendly_name,
+        status: factor.status,
+        createdAt: factor.created_at,
+        updatedAt: factor.updated_at,
+    };
+}
+/**
+ * Convert GoTrueUser to User
+ */
+export function normalizeUser(gotrueUser) {
+    return {
+        id: gotrueUser.id,
+        email: gotrueUser.email ?? null,
+        phone: gotrueUser.phone ?? null,
+        emailConfirmedAt: gotrueUser.email_confirmed_at ?? null,
+        phoneConfirmedAt: gotrueUser.phone_confirmed_at ?? null,
+        createdAt: gotrueUser.created_at,
+        updatedAt: gotrueUser.updated_at,
+        appMetadata: gotrueUser.app_metadata,
+        userMetadata: gotrueUser.user_metadata,
+        identities: gotrueUser.identities?.map(normalizeIdentity),
+        factors: gotrueUser.factors?.map(normalizeFactor),
+    };
+}
+/**
+ * Convert GoTrueTokenResponse to Session
+ */
+export function normalizeSession(response) {
+    return {
+        accessToken: response.access_token,
+        refreshToken: response.refresh_token,
+        expiresIn: response.expires_in,
+        expiresAt: response.expires_at,
+        tokenType: response.token_type,
+        user: normalizeUser(response.user),
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,gCAAgC;AAChC,+CAA+C;AA4e/C,+CAA+C;AAC/C,cAAc;AACd,+CAA+C;AAE/C;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,MAAM,EAAE,QAAQ,CAAC,OAAO;QACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,WAAW;QAChC,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,YAAY,EAAE,QAAQ,CAAC,eAAe,IAAI,IAAI;KAC/C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,YAAY,EAAE,MAAM,CAAC,aAAa;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,UAAU;QAC5B,SAAS,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,UAAsB;IAClD,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;QAC/B,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;QAC/B,gBAAgB,EAAE,UAAU,CAAC,kBAAkB,IAAI,IAAI;QACvD,gBAAgB,EAAE,UAAU,CAAC,kBAAkB,IAAI,IAAI;QACvD,SAAS,EAAE,UAAU,CAAC,UAAU;QAChC,SAAS,EAAE,UAAU,CAAC,UAAU;QAChC,WAAW,EAAE,UAAU,CAAC,YAAY;QACpC,YAAY,EAAE,UAAU,CAAC,aAAa;QACtC,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,iBAAiB,CAAC;QACzD,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA6B;IAC5D,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,YAAY;QAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/auth/user/identities.d.ts

@@ -0,0 +1,62 @@
+import type { HttpClient } from "../../lib/http.js";
+import type { UserIdentity, LinkIdentityOptions, UnlinkIdentityOptions } from "../types.js";
+/**
+ * Identity management methods
+ *
+ * Manages linked OAuth identities (Google, GitHub, etc.)
+ */
+export declare class IdentityMethods {
+    private readonly http;
+    private readonly tenantId;
+    constructor(http: HttpClient, tenantId: string);
+    /**
+     * Get the base URL for OAuth redirects
+     */
+    private getBaseUrl;
+    /**
+     * List all linked identities
+     *
+     * @example
+     * ```typescript
+     * const identities = await client.auth.identities.list();
+     * for (const identity of identities) {
+     *   console.log(identity.provider, identity.identityData.email);
+     * }
+     * ```
+     */
+    list(): Promise<UserIdentity[]>;
+    /**
+     * Link a new OAuth identity
+     *
+     * Initiates an OAuth flow to link another provider to the current account.
+     * After successful auth, the identity will be linked.
+     *
+     * @example
+     * ```typescript
+     * // Link GitHub account
+     * const { url } = await client.auth.identities.link({
+     *   provider: "github",
+     *   redirectTo: "https://myapp.com/settings/accounts",
+     * });
+     * ```
+     */
+    link(options: LinkIdentityOptions): Promise<{
+        url: string;
+        provider: string;
+    }>;
+    /**
+     * Unlink an OAuth identity
+     *
+     * Removes the linked identity from the account.
+     * User must have at least one other sign-in method.
+     *
+     * @example
+     * ```typescript
+     * await client.auth.identities.unlink({
+     *   identityId: "identity-uuid",
+     * });
+     * ```
+     */
+    unlink(options: UnlinkIdentityOptions): Promise<void>;
+}
+//# sourceMappingURL=identities.d.ts.map

package/dist/auth/user/identities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identities.d.ts","sourceRoot":"","sources":["../../../src/auth/user/identities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AAGrB;;;;GAIG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM;IAGnC;;OAEG;IACH,OAAO,CAAC,UAAU;IAIlB;;;;;;;;;;OAUG;IACG,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAMrC;;;;;;;;;;;;;;OAcG;IACG,IAAI,CACR,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAqB7C;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAO5D"}

package/dist/auth/user/identities.js

@@ -0,0 +1,88 @@
+import { authPath } from "../../lib/paths.js";
+import { normalizeIdentity } from "../types.js";
+/**
+ * Identity management methods
+ *
+ * Manages linked OAuth identities (Google, GitHub, etc.)
+ */
+export class IdentityMethods {
+    http;
+    tenantId;
+    constructor(http, tenantId) {
+        this.http = http;
+        this.tenantId = tenantId;
+    }
+    /**
+     * Get the base URL for OAuth redirects
+     */
+    getBaseUrl() {
+        return this.http.getBaseUrl();
+    }
+    /**
+     * List all linked identities
+     *
+     * @example
+     * ```typescript
+     * const identities = await client.auth.identities.list();
+     * for (const identity of identities) {
+     *   console.log(identity.provider, identity.identityData.email);
+     * }
+     * ```
+     */
+    async list() {
+        const path = authPath(this.tenantId, "/user/identities");
+        const response = await this.http.get(path);
+        return response.map(normalizeIdentity);
+    }
+    /**
+     * Link a new OAuth identity
+     *
+     * Initiates an OAuth flow to link another provider to the current account.
+     * After successful auth, the identity will be linked.
+     *
+     * @example
+     * ```typescript
+     * // Link GitHub account
+     * const { url } = await client.auth.identities.link({
+     *   provider: "github",
+     *   redirectTo: "https://myapp.com/settings/accounts",
+     * });
+     * ```
+     */
+    async link(options) {
+        const { provider, redirectTo, scopes } = options;
+        // Build authorization URL for linking
+        const params = new URLSearchParams();
+        if (redirectTo)
+            params.set("redirect_to", redirectTo);
+        if (scopes)
+            params.set("scopes", scopes);
+        const baseUrl = this.getBaseUrl();
+        const authorizePath = authPath(this.tenantId, `/user/identities/authorize`);
+        const queryString = params.toString();
+        const url = `${baseUrl}${authorizePath}?provider=${provider}${queryString ? `&${queryString}` : ""}`;
+        // Redirect in browser
+        if (typeof window !== "undefined") {
+            window.location.href = url;
+        }
+        return { url, provider };
+    }
+    /**
+     * Unlink an OAuth identity
+     *
+     * Removes the linked identity from the account.
+     * User must have at least one other sign-in method.
+     *
+     * @example
+     * ```typescript
+     * await client.auth.identities.unlink({
+     *   identityId: "identity-uuid",
+     * });
+     * ```
+     */
+    async unlink(options) {
+        const path = authPath(this.tenantId, `/user/identities/${options.identityId}`);
+        await this.http.delete(path);
+    }
+}
+//# sourceMappingURL=identities.js.map

package/dist/auth/user/identities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identities.js","sourceRoot":"","sources":["../../../src/auth/user/identities.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAO9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,IAAgB,EAChB,QAAgB;QADhB,SAAI,GAAJ,IAAI,CAAY;QAChB,aAAQ,GAAR,QAAQ,CAAQ;IAChC,CAAC;IAEJ;;OAEG;IACK,UAAU;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,IAAI,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,IAAI,CACR,OAA4B;QAE5B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEjD,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,aAAa,aAAa,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAErG,sBAAsB;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC7B,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CAAC,OAA8B;QACzC,MAAM,IAAI,GAAG,QAAQ,CACnB,IAAI,CAAC,QAAQ,EACb,oBAAoB,OAAO,CAAC,UAAU,EAAE,CACzC,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/auth/user/index.d.ts

@@ -0,0 +1,4 @@
+export { UserMethods } from "./user.js";
+export { IdentityMethods } from "./identities.js";
+export { VerificationMethods } from "./verification.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/auth/user/index.js

@@ -0,0 +1,4 @@
+export { UserMethods } from "./user.js";
+export { IdentityMethods } from "./identities.js";
+export { VerificationMethods } from "./verification.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}