@koolbase/core 10.3.0 → 10.4.0

package/dist/cjs/auth-errors.d.ts

@@ -64,6 +64,25 @@ export declare class UnlockTokenInvalidError extends KoolbaseAuthError {
 export declare class RateLimitError extends KoolbaseAuthError {
     constructor(message?: string);
 }
+/**
+ * The verification email was refused because one was sent too recently.
+ *
+ * Carries when the next send becomes possible, so an app can show a countdown
+ * rather than a bare refusal — the server sends the timestamp and throwing it
+ * away would waste the only thing that makes this error actionable.
+ */
+export declare class VerificationResendCooldownError extends KoolbaseAuthError {
+    readonly cooldownUntil: Date | null;
+    constructor(cooldownUntil: Date | null, message?: string);
+}
+/**
+ * The day's verification-email allowance is spent. Distinct from the cooldown
+ * because the remedy differs: waiting seconds versus waiting until tomorrow,
+ * and an app should say which.
+ */
+export declare class VerificationResendDailyCapError extends KoolbaseAuthError {
+    constructor(message?: string);
+}
 /**
  * Generic network error. The SDK does NOT throw this directly — fetch
  * failures (DNS, no connection, timeout) propagate as native TypeErrors.

package/dist/cjs/auth-errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GoogleEmailRequiredError = exports.InvalidGoogleTokenError = exports.GoogleSignInNotConfiguredError = exports.OAuthEmailConflictError = exports.AppleEmailRequiredError = exports.InvalidAppleTokenError = exports.AppleSignInNotConfiguredError = exports.SmsConfigMissingError = exports.PhoneAlreadyLinkedError = exports.OtpRateLimitError = exports.OtpMaxAttemptsError = exports.OtpInvalidError = exports.OtpExpiredError = exports.InvalidPhoneNumberError = exports.NetworkError = exports.RateLimitError = exports.UnlockTokenInvalidError = exports.AccountLockedError = exports.TokenRevokedError = exports.SessionExpiredError = exports.WeakPasswordError = exports.UserDisabledError = exports.EmailAlreadyInUseError = exports.InvalidCredentialsError = exports.KoolbaseAuthError = void 0;
+exports.GoogleEmailRequiredError = exports.InvalidGoogleTokenError = exports.GoogleSignInNotConfiguredError = exports.OAuthEmailConflictError = exports.AppleEmailRequiredError = exports.InvalidAppleTokenError = exports.AppleSignInNotConfiguredError = exports.SmsConfigMissingError = exports.PhoneAlreadyLinkedError = exports.OtpRateLimitError = exports.OtpMaxAttemptsError = exports.OtpInvalidError = exports.OtpExpiredError = exports.InvalidPhoneNumberError = exports.NetworkError = exports.VerificationResendDailyCapError = exports.VerificationResendCooldownError = exports.RateLimitError = exports.UnlockTokenInvalidError = exports.AccountLockedError = exports.TokenRevokedError = exports.SessionExpiredError = exports.WeakPasswordError = exports.UserDisabledError = exports.EmailAlreadyInUseError = exports.InvalidCredentialsError = exports.KoolbaseAuthError = void 0;
 const errors_js_1 = require("./errors.js");
 /**
  * Base error type for all Koolbase auth errors. Catchable via
@@ -120,6 +120,35 @@ class RateLimitError extends KoolbaseAuthError {
     }
 }
 exports.RateLimitError = RateLimitError;
+/**
+ * The verification email was refused because one was sent too recently.
+ *
+ * Carries when the next send becomes possible, so an app can show a countdown
+ * rather than a bare refusal — the server sends the timestamp and throwing it
+ * away would waste the only thing that makes this error actionable.
+ */
+class VerificationResendCooldownError extends KoolbaseAuthError {
+    constructor(cooldownUntil, message) {
+        super(message ?? 'Please wait before requesting another verification email', 'resend_cooldown');
+        this.cooldownUntil = cooldownUntil;
+        this.name = 'VerificationResendCooldownError';
+        Object.setPrototypeOf(this, VerificationResendCooldownError.prototype);
+    }
+}
+exports.VerificationResendCooldownError = VerificationResendCooldownError;
+/**
+ * The day's verification-email allowance is spent. Distinct from the cooldown
+ * because the remedy differs: waiting seconds versus waiting until tomorrow,
+ * and an app should say which.
+ */
+class VerificationResendDailyCapError extends KoolbaseAuthError {
+    constructor(message) {
+        super(message ?? 'Daily verification-email limit reached; try again tomorrow', 'resend_daily_cap');
+        this.name = 'VerificationResendDailyCapError';
+        Object.setPrototypeOf(this, VerificationResendDailyCapError.prototype);
+    }
+}
+exports.VerificationResendDailyCapError = VerificationResendDailyCapError;
 // ─── Network ───────────────────────────────────────────────────────────────
 /**
  * Generic network error. The SDK does NOT throw this directly — fetch

package/dist/cjs/auth.d.ts

@@ -1,4 +1,4 @@
-import { AuthStateListener, KoolbaseConfig, KoolbaseSession, KoolbaseUser, LinkPhoneParams, LoginParams, OtpSendResult, PhoneVerifyResult, RegisterParams, RestoreResult, SendOtpParams, SignInWithAppleParams, VerifyOtpParams } from './types.js';
+import { AuthStateListener, KoolbaseConfig, KoolbaseSession, KoolbaseUser, LinkPhoneParams, LoginParams, OtpSendResult, PhoneVerifyResult, RegisterParams, RestoreResult, ResendVerificationResult, SendOtpParams, SignInWithAppleParams, VerifyOtpParams } from './types.js';
 import type { SignInWithGoogleParams } from './types.js';
 export declare class KoolbaseAuth {
     private config;
@@ -143,6 +143,27 @@ export declare class KoolbaseAuth {
     logout(): Promise<boolean>;
     forgotPassword(email: string): Promise<void>;
     resetPassword(token: string, password: string): Promise<void>;
+    /**
+     * Complete email verification with a token from a verification link.
+     *
+     * The token comes from wherever your verification URL template pointed —
+     * your own page reads it from the query string and passes it here. Throws
+     * if the token is invalid, expired or already used.
+     */
+    verifyEmail(token: string): Promise<void>;
+    /**
+     * Re-send the verification email to the signed-in but unverified user.
+     *
+     * Safe to call when already verified: nothing is sent and
+     * `alreadyVerified` comes back true. The server throttles this — a short
+     * cooldown between sends and a daily cap — and the refusal arrives as
+     * VerificationResendCooldownError carrying when to retry, or
+     * VerificationResendDailyCapError when the day's allowance is spent.
+     *
+     * Requires a session, since the server verifies the caller rather than
+     * taking an email address — otherwise this would be an open mail relay.
+     */
+    resendVerificationEmail(): Promise<ResendVerificationResult>;
     unlock(token: string): Promise<void>;
     get currentUser(): KoolbaseUser | null;
     get accessToken(): string | null;

package/dist/cjs/auth.js

@@ -503,6 +503,45 @@ class KoolbaseAuth {
         });
         await this.checkResponse(res);
     }
+    /**
+     * Complete email verification with a token from a verification link.
+     *
+     * The token comes from wherever your verification URL template pointed —
+     * your own page reads it from the query string and passes it here. Throws
+     * if the token is invalid, expired or already used.
+     */
+    async verifyEmail(token) {
+        const res = await this.authRequest('/v1/sdk/auth/verify-email', {
+            method: 'POST',
+            body: { token },
+        });
+        await this.checkResponse(res);
+    }
+    /**
+     * Re-send the verification email to the signed-in but unverified user.
+     *
+     * Safe to call when already verified: nothing is sent and
+     * `alreadyVerified` comes back true. The server throttles this — a short
+     * cooldown between sends and a daily cap — and the refusal arrives as
+     * VerificationResendCooldownError carrying when to retry, or
+     * VerificationResendDailyCapError when the day's allowance is spent.
+     *
+     * Requires a session, since the server verifies the caller rather than
+     * taking an email address — otherwise this would be an open mail relay.
+     */
+    async resendVerificationEmail() {
+        const res = await this.authRequest('/v1/sdk/auth/resend-verification', {
+            method: 'POST',
+            includeAuth: true,
+        });
+        await this.checkResponse(res);
+        const body = (await res.json().catch(() => ({})));
+        return {
+            alreadyVerified: body.already_verified ?? false,
+            expiresAt: body.expires_at ? new Date(body.expires_at) : null,
+            cooldownUntil: body.cooldown_until ? new Date(body.cooldown_until) : null,
+        };
+    }
     async unlock(token) {
         const res = await this.authRequest('/v1/sdk/auth/unlock', {
             method: 'POST',
@@ -725,6 +764,10 @@ class KoolbaseAuth {
                 throw new auth_errors_js_1.UnlockTokenInvalidError();
             case 'rate_limit':
                 throw new auth_errors_js_1.RateLimitError(msg || undefined);
+            case 'resend_cooldown':
+                throw new auth_errors_js_1.VerificationResendCooldownError(body.cooldown_until ? new Date(body.cooldown_until) : null, msg || undefined);
+            case 'resend_daily_cap':
+                throw new auth_errors_js_1.VerificationResendDailyCapError(msg || undefined);
         }
         // ─── status fallback (pre-code servers) ───
         if (res.status === 409)

package/dist/cjs/index.d.ts

@@ -18,5 +18,5 @@ export type { RegisterTokenOptions } from './messaging.js';
 export { getOrCreateDeviceId } from './device-id.js';
 export { koolbaseSdkVersion } from './device-metadata.js';
 export { RestoreResult } from './types.js';
-export type { AuthStateListener, FetchLike, KoolbaseAuthStorage } from './types.js';
+export type { AuthStateListener, FetchLike, KoolbaseAuthStorage, ResendVerificationResult } from './types.js';
 export { setPlatform, getPlatform, memoryPlatform, type PlatformAdapter, type PlatformStorage, type PlatformNetwork, type PlatformLifecycle, type PlatformLocks, type PlatformInfo, } from './platform.js';

package/dist/cjs/types.d.ts

@@ -53,6 +53,23 @@ export interface KoolbaseSession {
  * unavailable), compliant encryption layers, or in-memory test mocks —
  * can implement this interface and inject it via KoolbaseConfig.authStorage.
  */
+/**
+ * What resendVerificationEmail() answers with.
+ *
+ * alreadyVerified is not an error: calling it for a verified account is a
+ * no-op that says so, which is what a "resend" button needs when the user
+ * verified in another tab.
+ *
+ * cooldownUntil is when the next send becomes possible. The server throttles
+ * sends, and a countdown is a better answer to a user than a bare refusal.
+ */
+export interface ResendVerificationResult {
+    alreadyVerified: boolean;
+    /** When the link in the email stops working. Null when nothing was sent. */
+    expiresAt: Date | null;
+    /** When another send becomes possible. Null when nothing was sent. */
+    cooldownUntil: Date | null;
+}
 export interface KoolbaseAuthStorage {
     saveSession(session: KoolbaseSession): Promise<void>;
     readSession(): Promise<KoolbaseSession | null>;

package/dist/esm/auth-errors.d.ts

@@ -64,6 +64,25 @@ export declare class UnlockTokenInvalidError extends KoolbaseAuthError {
 export declare class RateLimitError extends KoolbaseAuthError {
     constructor(message?: string);
 }
+/**
+ * The verification email was refused because one was sent too recently.
+ *
+ * Carries when the next send becomes possible, so an app can show a countdown
+ * rather than a bare refusal — the server sends the timestamp and throwing it
+ * away would waste the only thing that makes this error actionable.
+ */
+export declare class VerificationResendCooldownError extends KoolbaseAuthError {
+    readonly cooldownUntil: Date | null;
+    constructor(cooldownUntil: Date | null, message?: string);
+}
+/**
+ * The day's verification-email allowance is spent. Distinct from the cooldown
+ * because the remedy differs: waiting seconds versus waiting until tomorrow,
+ * and an app should say which.
+ */
+export declare class VerificationResendDailyCapError extends KoolbaseAuthError {
+    constructor(message?: string);
+}
 /**
  * Generic network error. The SDK does NOT throw this directly — fetch
  * failures (DNS, no connection, timeout) propagate as native TypeErrors.

package/dist/esm/auth-errors.js

@@ -107,6 +107,33 @@ export class RateLimitError extends KoolbaseAuthError {
         Object.setPrototypeOf(this, RateLimitError.prototype);
     }
 }
+/**
+ * The verification email was refused because one was sent too recently.
+ *
+ * Carries when the next send becomes possible, so an app can show a countdown
+ * rather than a bare refusal — the server sends the timestamp and throwing it
+ * away would waste the only thing that makes this error actionable.
+ */
+export class VerificationResendCooldownError extends KoolbaseAuthError {
+    constructor(cooldownUntil, message) {
+        super(message ?? 'Please wait before requesting another verification email', 'resend_cooldown');
+        this.cooldownUntil = cooldownUntil;
+        this.name = 'VerificationResendCooldownError';
+        Object.setPrototypeOf(this, VerificationResendCooldownError.prototype);
+    }
+}
+/**
+ * The day's verification-email allowance is spent. Distinct from the cooldown
+ * because the remedy differs: waiting seconds versus waiting until tomorrow,
+ * and an app should say which.
+ */
+export class VerificationResendDailyCapError extends KoolbaseAuthError {
+    constructor(message) {
+        super(message ?? 'Daily verification-email limit reached; try again tomorrow', 'resend_daily_cap');
+        this.name = 'VerificationResendDailyCapError';
+        Object.setPrototypeOf(this, VerificationResendDailyCapError.prototype);
+    }
+}
 // ─── Network ───────────────────────────────────────────────────────────────
 /**
  * Generic network error. The SDK does NOT throw this directly — fetch

package/dist/esm/auth.d.ts

@@ -1,4 +1,4 @@
-import { AuthStateListener, KoolbaseConfig, KoolbaseSession, KoolbaseUser, LinkPhoneParams, LoginParams, OtpSendResult, PhoneVerifyResult, RegisterParams, RestoreResult, SendOtpParams, SignInWithAppleParams, VerifyOtpParams } from './types.js';
+import { AuthStateListener, KoolbaseConfig, KoolbaseSession, KoolbaseUser, LinkPhoneParams, LoginParams, OtpSendResult, PhoneVerifyResult, RegisterParams, RestoreResult, ResendVerificationResult, SendOtpParams, SignInWithAppleParams, VerifyOtpParams } from './types.js';
 import type { SignInWithGoogleParams } from './types.js';
 export declare class KoolbaseAuth {
     private config;
@@ -143,6 +143,27 @@ export declare class KoolbaseAuth {
     logout(): Promise<boolean>;
     forgotPassword(email: string): Promise<void>;
     resetPassword(token: string, password: string): Promise<void>;
+    /**
+     * Complete email verification with a token from a verification link.
+     *
+     * The token comes from wherever your verification URL template pointed —
+     * your own page reads it from the query string and passes it here. Throws
+     * if the token is invalid, expired or already used.
+     */
+    verifyEmail(token: string): Promise<void>;
+    /**
+     * Re-send the verification email to the signed-in but unverified user.
+     *
+     * Safe to call when already verified: nothing is sent and
+     * `alreadyVerified` comes back true. The server throttles this — a short
+     * cooldown between sends and a daily cap — and the refusal arrives as
+     * VerificationResendCooldownError carrying when to retry, or
+     * VerificationResendDailyCapError when the day's allowance is spent.
+     *
+     * Requires a session, since the server verifies the caller rather than
+     * taking an email address — otherwise this would be an open mail relay.
+     */
+    resendVerificationEmail(): Promise<ResendVerificationResult>;
     unlock(token: string): Promise<void>;
     get currentUser(): KoolbaseUser | null;
     get accessToken(): string | null;

package/dist/esm/auth.js

@@ -1,5 +1,5 @@
 import { RestoreResult, } from './types.js';
-import { AccountLockedError, EmailAlreadyInUseError, InvalidCredentialsError, InvalidPhoneNumberError, KoolbaseAuthError, OtpExpiredError, OtpInvalidError, OtpMaxAttemptsError, OtpRateLimitError, PhoneAlreadyLinkedError, RateLimitError, SessionExpiredError, SmsConfigMissingError, TokenRevokedError, UnlockTokenInvalidError, UserDisabledError, WeakPasswordError, AppleEmailRequiredError, AppleSignInNotConfiguredError, InvalidAppleTokenError, OAuthEmailConflictError, GoogleEmailRequiredError, GoogleSignInNotConfiguredError, InvalidGoogleTokenError, } from './auth-errors.js';
+import { AccountLockedError, EmailAlreadyInUseError, InvalidCredentialsError, InvalidPhoneNumberError, KoolbaseAuthError, OtpExpiredError, OtpInvalidError, OtpMaxAttemptsError, OtpRateLimitError, PhoneAlreadyLinkedError, RateLimitError, VerificationResendCooldownError, VerificationResendDailyCapError, SessionExpiredError, SmsConfigMissingError, TokenRevokedError, UnlockTokenInvalidError, UserDisabledError, WeakPasswordError, AppleEmailRequiredError, AppleSignInNotConfiguredError, InvalidAppleTokenError, OAuthEmailConflictError, GoogleEmailRequiredError, GoogleSignInNotConfiguredError, InvalidGoogleTokenError, } from './auth-errors.js';
 import { getPlatform } from './platform.js';
 import { DeviceMetadata } from './device-metadata.js';
 export class KoolbaseAuth {
@@ -500,6 +500,45 @@ export class KoolbaseAuth {
         });
         await this.checkResponse(res);
     }
+    /**
+     * Complete email verification with a token from a verification link.
+     *
+     * The token comes from wherever your verification URL template pointed —
+     * your own page reads it from the query string and passes it here. Throws
+     * if the token is invalid, expired or already used.
+     */
+    async verifyEmail(token) {
+        const res = await this.authRequest('/v1/sdk/auth/verify-email', {
+            method: 'POST',
+            body: { token },
+        });
+        await this.checkResponse(res);
+    }
+    /**
+     * Re-send the verification email to the signed-in but unverified user.
+     *
+     * Safe to call when already verified: nothing is sent and
+     * `alreadyVerified` comes back true. The server throttles this — a short
+     * cooldown between sends and a daily cap — and the refusal arrives as
+     * VerificationResendCooldownError carrying when to retry, or
+     * VerificationResendDailyCapError when the day's allowance is spent.
+     *
+     * Requires a session, since the server verifies the caller rather than
+     * taking an email address — otherwise this would be an open mail relay.
+     */
+    async resendVerificationEmail() {
+        const res = await this.authRequest('/v1/sdk/auth/resend-verification', {
+            method: 'POST',
+            includeAuth: true,
+        });
+        await this.checkResponse(res);
+        const body = (await res.json().catch(() => ({})));
+        return {
+            alreadyVerified: body.already_verified ?? false,
+            expiresAt: body.expires_at ? new Date(body.expires_at) : null,
+            cooldownUntil: body.cooldown_until ? new Date(body.cooldown_until) : null,
+        };
+    }
     async unlock(token) {
         const res = await this.authRequest('/v1/sdk/auth/unlock', {
             method: 'POST',
@@ -722,6 +761,10 @@ export class KoolbaseAuth {
                 throw new UnlockTokenInvalidError();
             case 'rate_limit':
                 throw new RateLimitError(msg || undefined);
+            case 'resend_cooldown':
+                throw new VerificationResendCooldownError(body.cooldown_until ? new Date(body.cooldown_until) : null, msg || undefined);
+            case 'resend_daily_cap':
+                throw new VerificationResendDailyCapError(msg || undefined);
         }
         // ─── status fallback (pre-code servers) ───
         if (res.status === 409)

package/dist/esm/index.d.ts

@@ -18,5 +18,5 @@ export type { RegisterTokenOptions } from './messaging.js';
 export { getOrCreateDeviceId } from './device-id.js';
 export { koolbaseSdkVersion } from './device-metadata.js';
 export { RestoreResult } from './types.js';
-export type { AuthStateListener, FetchLike, KoolbaseAuthStorage } from './types.js';
+export type { AuthStateListener, FetchLike, KoolbaseAuthStorage, ResendVerificationResult } from './types.js';
 export { setPlatform, getPlatform, memoryPlatform, type PlatformAdapter, type PlatformStorage, type PlatformNetwork, type PlatformLifecycle, type PlatformLocks, type PlatformInfo, } from './platform.js';

package/dist/esm/types.d.ts

@@ -53,6 +53,23 @@ export interface KoolbaseSession {
  * unavailable), compliant encryption layers, or in-memory test mocks —
  * can implement this interface and inject it via KoolbaseConfig.authStorage.
  */
+/**
+ * What resendVerificationEmail() answers with.
+ *
+ * alreadyVerified is not an error: calling it for a verified account is a
+ * no-op that says so, which is what a "resend" button needs when the user
+ * verified in another tab.
+ *
+ * cooldownUntil is when the next send becomes possible. The server throttles
+ * sends, and a countdown is a better answer to a user than a bare refusal.
+ */
+export interface ResendVerificationResult {
+    alreadyVerified: boolean;
+    /** When the link in the email stops working. Null when nothing was sent. */
+    expiresAt: Date | null;
+    /** When another send becomes possible. Null when nothing was sent. */
+    cooldownUntil: Date | null;
+}
 export interface KoolbaseAuthStorage {
     saveSession(session: KoolbaseSession): Promise<void>;
     readSession(): Promise<KoolbaseSession | null>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koolbase/core",
-  "version": "10.3.0",
+  "version": "10.4.0",
   "description": "Koolbase SDK core \u2014 shared behaviour behind @koolbase/react-native and @koolbase/js. Install one of those, not this.",
   "main": "./dist/cjs/index.js",
   "types": "./dist/esm/index.d.ts",