@mestra-dev/contract 0.0.61 → 0.0.63

package/dist/index.d.ts

@@ -785,7 +785,8 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							readonly type: "object";
 							readonly required: readonly [
 								"id",
-								"email"
+								"emailVerified",
+								"phoneVerified"
 							];
 							readonly properties: {
 								readonly id: {
@@ -795,6 +796,17 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								readonly email: {
 									readonly type: "string";
 									readonly format: "email";
+									readonly nullable: true;
+								};
+								readonly phone: {
+									readonly type: "string";
+									readonly nullable: true;
+								};
+								readonly emailVerified: {
+									readonly type: "boolean";
+								};
+								readonly phoneVerified: {
+									readonly type: "boolean";
 								};
 								readonly firstName: {
 									readonly type: "string";
@@ -4512,6 +4524,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Request a one-time password";
+							readonly description: "Without a bearer token this starts email login/signup. With an access token it links an email to the current account (for users who signed in with SMS).";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4562,6 +4578,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Verify a one-time password";
+							readonly description: "Without a bearer token this completes email login/signup and returns tokens. With an access token it verifies and attaches an email to the current account.";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4626,6 +4646,156 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/auth/request-sms-otp": {
+						readonly post: {
+							readonly tags: readonly [
+								"Auth"
+							];
+							readonly summary: "Request a one-time password by SMS";
+							readonly description: "Without a bearer token this starts SMS login/signup. With an access token it links a phone to the current account (for users who signed in with email). SMS is sent via Kod.mobi only when dialCode is +7.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly type: "object";
+											readonly required: readonly [
+												"dialCode",
+												"number"
+											];
+											readonly properties: {
+												readonly dialCode: {
+													readonly type: "string";
+													readonly description: "International dial code, with or without a leading +.";
+													readonly example: "+7";
+												};
+												readonly number: {
+													readonly type: "string";
+													readonly description: "National phone number without the dial code.";
+													readonly example: "9197286223";
+												};
+											};
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "OTP generated and sent successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/OtpRequestSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Validation failed or an active OTP already exists.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/OtpRequestFailure";
+											};
+										};
+									};
+								};
+								readonly 429: {
+									readonly description: "Too Many Requests - Rate limit exceeded.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
+					readonly "/auth/verify-sms-otp": {
+						readonly post: {
+							readonly tags: readonly [
+								"Auth"
+							];
+							readonly summary: "Verify an SMS one-time password";
+							readonly description: "Without a bearer token this completes SMS login/signup and returns tokens. With an access token it verifies and attaches a phone to the current account.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly type: "object";
+											readonly required: readonly [
+												"dialCode",
+												"number",
+												"otp"
+											];
+											readonly properties: {
+												readonly dialCode: {
+													readonly type: "string";
+													readonly description: "International dial code, with or without a leading +.";
+													readonly example: "+7";
+												};
+												readonly number: {
+													readonly type: "string";
+													readonly description: "National phone number without the dial code.";
+													readonly example: "9197286223";
+												};
+												readonly otp: {
+													readonly type: "string";
+													readonly pattern: "^[0-9]{6}$";
+													readonly description: "6-digit OTP code.";
+												};
+												readonly keepSignIn: {
+													readonly type: "boolean";
+													readonly description: "Extend refresh token validity to 30 days when true (default 7 days).";
+												};
+											};
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "OTP verified successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Validation failed or OTP is invalid/expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/VerifyOtpFailure";
+											};
+										};
+									};
+								};
+								readonly 429: {
+									readonly description: "Too Many Requests - Rate limit exceeded.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/auth/me": {
 						readonly get: {
 							readonly tags: readonly [
@@ -4989,7 +5159,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Workspace"
 							];
 							readonly summary: "Create a new workspace";
-							readonly description: "Creates a workspace and its billing subscription atomically. Free starts a 15-day trial (default `TRIAL_WORKSPACE_LIMIT` is 1 Free trial per owner). Economy, Standard, and Professional create a pending invoice; use the returned invoiceId to start YooKassa checkout. An owner may have at most 5 pending unpaid invoices for those paid plans before creating another. Professional may create one complimentary workspace for an owner with an active paid Professional workspace.";
+							readonly description: "Creates a workspace and its billing subscription atomically. Requires the caller to have both email and phone verified. Free starts a 15-day trial (default `TRIAL_WORKSPACE_LIMIT` is 1 Free trial per owner). Economy, Standard, and Professional create a pending invoice; use the returned invoiceId to start YooKassa checkout. An owner may have at most 5 pending unpaid invoices for those paid plans before creating another. Professional may create one complimentary workspace for an owner with an active paid Professional workspace.";
 							readonly security: readonly [
 								never
 							];
@@ -5074,7 +5244,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 403: {
-									readonly description: "Forbidden - Token issuer is not 'access'.";
+									readonly description: "Forbidden - Token issuer is not 'access', or email and phone are not both verified.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -5855,7 +6025,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Workspace"
 							];
 							readonly summary: "Accept workspace invitation";
-							readonly description: "Accepts a workspace invitation using the provided token. Requires authentication.";
+							readonly description: "Accepts a workspace invitation using the provided token. Requires authentication and both email and phone verified.";
 							readonly security: readonly [
 								never
 							];
@@ -5914,7 +6084,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 403: {
-									readonly description: "Forbidden - Token issuer is not 'access' or user lacks workspace access.";
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, or email and phone are not both verified.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -12878,6 +13048,27 @@ declare const routes: import("hono/hono-base").HonoBase<{
 	};
 } & {
 	"/verify-otp": {
+		$post: {
+			input: {};
+			output: {
+				success: boolean;
+				error: string | undefined;
+			};
+			outputFormat: "json";
+			status: 200 | 400;
+		} | {
+			input: {};
+			output: {
+				success: boolean;
+				accessToken: string | null;
+				refreshToken: string | null;
+			};
+			outputFormat: "json";
+			status: 200 | 400;
+		};
+	};
+} & {
+	"/request-sms-otp": {
 		$post: {
 			input: {};
 			output: {
@@ -12886,6 +13077,26 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			};
 			outputFormat: "json";
 			status: 400;
+		} | {
+			input: {};
+			output: {
+				success: boolean;
+				expiresAt: any;
+			};
+			outputFormat: "json";
+			status: 200 | 400;
+		};
+	};
+} & {
+	"/verify-sms-otp": {
+		$post: {
+			input: {};
+			output: {
+				success: boolean;
+				error: string | undefined;
+			};
+			outputFormat: "json";
+			status: 200 | 400;
 		} | {
 			input: {};
 			output: {
@@ -12905,7 +13116,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 				success: true;
 				user: {
 					id: string;
-					email: string;
+					email: string | null;
+					phone: string | null;
+					emailVerified: boolean;
+					phoneVerified: boolean;
 					firstName: string | null;
 					lastName: string | null;
 					profilePicture: string | null;
@@ -13339,6 +13553,20 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			};
 			outputFormat: "json";
 			status: 400;
+		} | {
+			input: {
+				param: {
+					workspace: string;
+				} & {
+					token: string;
+				};
+			};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 403;
 		} | {
 			input: {
 				param: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.61",
+  "version": "0.0.63",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,