@layers/amba-react-native 4.0.0 → 4.0.1

package/dist/index.cjs

@@ -351,7 +351,7 @@ function freshSeed() {
 //#endregion
 //#region src/index.ts
 /** SDK semver — burned in at build time. Bump alongside package.json. */
-const SDK_VERSION = "4.0.0";
+const SDK_VERSION = "4.0.1";
 let state = null;
 function getState() {
 	if (!state) throw new AmbaApiError("NOT_INITIALIZED", "@layers/amba-react-native: SDK not configured. Call Amba.configure({ projectId, clientKey }) at app start.");
@@ -395,6 +395,24 @@ async function postAuth(state_, path, body) {
 	await notifyFromAuthResult(result);
 	return result;
 }
+/**
+* POST helper for endpoints that return `{ data: { user } }` WITHOUT
+* minting new tokens. Used by `linkSmsOtp` / `linkEmailOtp` / `unlink*`
+* — these are "decorate the current user," not "re-authenticate."
+* Existing session tokens stay untouched.
+*/
+async function postUserNoRotate(state_, path, body) {
+	return (await state_.http.post(path, body)).data.user;
+}
+async function unlinkProvider(provider) {
+	const s = getState();
+	const sessionToken = s.identity.getSessionToken();
+	if (!sessionToken) throw new AmbaApiError("UNAUTHORIZED", "no active session — call signIn* first");
+	return postUserNoRotate(s, P.authUnlink, {
+		provider,
+		session_token: sessionToken
+	});
+}
 function requireEmail(email) {
 	const trimmed = email.trim();
 	if (trimmed === "") throw new AmbaApiError("VALIDATION_ERROR", "email must not be empty");
@@ -422,6 +440,8 @@ const P = {
 	authMagicLinkRequest: "/v1/client/auth/magic-link/request",
 	authMagicLinkVerify: "/v1/client/auth/magic-link/verify",
 	authLink: "/v1/client/auth/link",
+	authUnlink: "/v1/client/auth/unlink",
+	authIdentifiers: "/v1/client/auth/identifiers",
 	authRefresh: "/v1/client/auth/refresh",
 	authLogout: "/v1/client/auth/logout",
 	authMe: "/v1/client/auth/me",
@@ -605,6 +625,41 @@ const Amba = {
 				session_token: sessionToken
 			});
 		},
+		linkSmsOtp: async (phone, code) => {
+			requireE164Phone(phone);
+			requireOtpCode(code);
+			const s = getState();
+			const sessionToken = s.identity.getSessionToken();
+			if (!sessionToken) throw new AmbaApiError("UNAUTHORIZED", "no active session — call signIn* first");
+			return postUserNoRotate(s, P.authLink, {
+				provider: "sms_otp",
+				phone,
+				code,
+				session_token: sessionToken
+			});
+		},
+		linkEmailOtp: async (email, code) => {
+			requireEmail(email);
+			requireOtpCode(code);
+			const s = getState();
+			const sessionToken = s.identity.getSessionToken();
+			if (!sessionToken) throw new AmbaApiError("UNAUTHORIZED", "no active session — call signIn* first");
+			return postUserNoRotate(s, P.authLink, {
+				provider: "email_otp",
+				email,
+				code,
+				session_token: sessionToken
+			});
+		},
+		unlinkSmsOtp: async () => unlinkProvider("sms_otp"),
+		unlinkEmailOtp: async () => unlinkProvider("email_otp"),
+		unlinkApple: async () => unlinkProvider("apple"),
+		unlinkGoogle: async () => unlinkProvider("google"),
+		getCurrentIdentifiers: async () => {
+			const s = getState();
+			if (!s.identity.getSessionToken()) throw new AmbaApiError("UNAUTHORIZED", "no active session — call signIn* first");
+			return (await s.http.get(P.authIdentifiers)).data.identifiers;
+		},
 		signOut: async (rotateAnonymousId = false) => {
 			const s = getState();
 			if (s.identity.getSessionToken()) try {