@mestra-dev/contract 0.0.62 → 0.0.64

package/dist/index.d.ts

@@ -167,10 +167,25 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									readonly example: "2025-01-20T10:30:00.000Z";
 								};
 								readonly error: {
-									readonly type: "object";
 									readonly nullable: true;
-									readonly description: "Validation error details when the payload is invalid.";
-									readonly additionalProperties: true;
+									readonly description: "Validation details (object) or a linking error string such as Phone already in use.";
+									readonly oneOf: readonly [
+										{
+											readonly type: "object";
+											readonly additionalProperties: true;
+										},
+										{
+											readonly type: "string";
+											readonly enum: readonly [
+												"User not found",
+												"Phone is already verified",
+												"Email is already verified",
+												"Phone already in use",
+												"Email already in use",
+												"An active OTP already exists"
+											];
+										}
+									];
 								};
 							};
 						};
@@ -192,7 +207,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 								readonly refreshToken: {
 									readonly type: "string";
-									readonly description: "JWT refresh token (expires in 12 hours or 7 days when keepSignIn is true). Claims include email and userId.";
+									readonly description: "JWT refresh token (expires in 7 days, or 30 days when keepSignIn is true). Claims include email and userId.";
 								};
 							};
 						};
@@ -219,10 +234,25 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									readonly example: null;
 								};
 								readonly error: {
-									readonly type: "object";
 									readonly nullable: true;
-									readonly description: "Validation error details when the payload is invalid.";
-									readonly additionalProperties: true;
+									readonly description: "Validation details (object) or a linking error string.";
+									readonly oneOf: readonly [
+										{
+											readonly type: "object";
+											readonly additionalProperties: true;
+										},
+										{
+											readonly type: "string";
+											readonly enum: readonly [
+												"User not found",
+												"Invalid or expired OTP",
+												"Phone is already verified",
+												"Email is already verified",
+												"Phone already in use",
+												"Email already in use"
+											];
+										}
+									];
 								};
 							};
 						};
@@ -785,7 +815,8 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							readonly type: "object";
 							readonly required: readonly [
 								"id",
-								"email"
+								"emailVerified",
+								"phoneVerified"
 							];
 							readonly properties: {
 								readonly id: {
@@ -795,11 +826,18 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								readonly email: {
 									readonly type: "string";
 									readonly format: "email";
+									readonly nullable: true;
 								};
 								readonly phone: {
 									readonly type: "string";
 									readonly nullable: true;
 								};
+								readonly emailVerified: {
+									readonly type: "boolean";
+								};
+								readonly phoneVerified: {
+									readonly type: "boolean";
+								};
 								readonly firstName: {
 									readonly type: "string";
 									readonly nullable: true;
@@ -4516,6 +4554,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Request a one-time password";
+							readonly description: "Without a bearer token this starts email login/signup. With an access token it links an email to the current account (for users who signed in with SMS).";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4548,7 +4590,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or an active OTP already exists.";
+									readonly description: "Validation failed, an active OTP already exists, or linking was rejected (email already verified / in use).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4557,6 +4599,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 							};
 						};
 					};
@@ -4566,6 +4618,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Verify a one-time password";
+							readonly description: "Without a bearer token this completes email login/signup and returns tokens. With an access token it verifies and attaches an email to the current account.";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4589,7 +4645,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 												};
 												readonly keepSignIn: {
 													readonly type: "boolean";
-													readonly description: "Extend refresh token validity to 7 days when true (default 12 hours).";
+													readonly description: "Login only. Extend refresh token validity to 30 days when true (default 7 days). Ignored when linking a contact.";
 												};
 											};
 										};
@@ -4598,17 +4654,24 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 							readonly responses: {
 								readonly 200: {
-									readonly description: "OTP verified successfully.";
+									readonly description: "Login returns tokens. Linking an email to the current account returns success only (no new tokens).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
-												readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+												readonly oneOf: readonly [
+													{
+														readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+													},
+													{
+														readonly $ref: "#/components/schemas/SimpleSuccess";
+													}
+												];
 											};
 										};
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or OTP is invalid/expired.";
+									readonly description: "Validation failed, OTP is invalid/expired, or linking was rejected.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4617,6 +4680,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4636,6 +4709,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Request a one-time password by SMS";
+							readonly description: "Without a bearer token this starts SMS login/signup. With an access token it links a phone to the current account (for users who signed in with email). SMS is sent via Kod.mobi only when dialCode is +7. Dial code +98 does not send SMS; the OTP is always 987321 for testing.";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4643,13 +4720,19 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										readonly schema: {
 											readonly type: "object";
 											readonly required: readonly [
-												"phone"
+												"dialCode",
+												"number"
 											];
 											readonly properties: {
-												readonly phone: {
+												readonly dialCode: {
+													readonly type: "string";
+													readonly description: "International dial code, with or without a leading +.";
+													readonly example: "+7";
+												};
+												readonly number: {
 													readonly type: "string";
-													readonly description: "Phone number in E.164 format. Russian numbers starting with 8 or 7 are normalized to +7.";
-													readonly example: "+79001234567";
+													readonly description: "National phone number without the dial code.";
+													readonly example: "9197286223";
 												};
 											};
 										};
@@ -4668,7 +4751,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or an active OTP already exists.";
+									readonly description: "Validation failed, an active OTP already exists, or linking was rejected (phone already verified / in use).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4677,6 +4760,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4696,6 +4789,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Verify an SMS one-time password";
+							readonly description: "Without a bearer token this completes SMS login/signup and returns tokens. With an access token it verifies and attaches a phone to the current account.";
+							readonly security: readonly [
+								never
+							];
 							readonly requestBody: {
 								readonly required: true;
 								readonly content: {
@@ -4703,14 +4800,20 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										readonly schema: {
 											readonly type: "object";
 											readonly required: readonly [
-												"phone",
+												"dialCode",
+												"number",
 												"otp"
 											];
 											readonly properties: {
-												readonly phone: {
+												readonly dialCode: {
 													readonly type: "string";
-													readonly description: "Phone number in E.164 format. Russian numbers starting with 8 or 7 are normalized to +7.";
-													readonly example: "+79001234567";
+													readonly description: "International dial code, with or without a leading +.";
+													readonly example: "+7";
+												};
+												readonly number: {
+													readonly type: "string";
+													readonly description: "National phone number without the dial code.";
+													readonly example: "9197286223";
 												};
 												readonly otp: {
 													readonly type: "string";
@@ -4719,7 +4822,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 												};
 												readonly keepSignIn: {
 													readonly type: "boolean";
-													readonly description: "Extend refresh token validity to 30 days when true (default 7 days).";
+													readonly description: "Login only. Extend refresh token validity to 30 days when true (default 7 days). Ignored when linking a contact.";
 												};
 											};
 										};
@@ -4728,17 +4831,24 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 							readonly responses: {
 								readonly 200: {
-									readonly description: "OTP verified successfully.";
+									readonly description: "Login returns tokens. Linking a phone to the current account returns success only (no new tokens).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
-												readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+												readonly oneOf: readonly [
+													{
+														readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+													},
+													{
+														readonly $ref: "#/components/schemas/SimpleSuccess";
+													}
+												];
 											};
 										};
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or OTP is invalid/expired.";
+									readonly description: "Validation failed, OTP is invalid/expired, or linking was rejected.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4747,6 +4857,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4766,7 +4886,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Get current authenticated user";
-							readonly description: "Returns the user profile for the `userId` claim on the provided access token.";
+							readonly description: "Returns the user profile for the `userId` claim on the provided access token. SMS-only accounts have `email: null` until an email is linked. Use `emailVerified` and `phoneVerified` to decide whether the user can create a workspace or accept an invite.";
 							readonly security: readonly [
 								never
 							];
@@ -5123,7 +5243,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Workspace"
 							];
 							readonly summary: "Create a new workspace";
-							readonly description: "Creates a workspace and its billing subscription atomically. Free starts a 15-day trial (default `TRIAL_WORKSPACE_LIMIT` is 1 Free trial per owner). Economy, Standard, and Professional create a pending invoice; use the returned invoiceId to start YooKassa checkout. An owner may have at most 5 pending unpaid invoices for those paid plans before creating another. Professional may create one complimentary workspace for an owner with an active paid Professional workspace.";
+							readonly description: "Creates a workspace and its billing subscription atomically. Requires the caller to have both email and phone verified. Free starts a 15-day trial (default `TRIAL_WORKSPACE_LIMIT` is 1 Free trial per owner). Economy, Standard, and Professional create a pending invoice; use the returned invoiceId to start YooKassa checkout. An owner may have at most 5 pending unpaid invoices for those paid plans before creating another. Professional may create one complimentary workspace for an owner with an active paid Professional workspace.";
 							readonly security: readonly [
 								never
 							];
@@ -5208,7 +5328,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 403: {
-									readonly description: "Forbidden - Token issuer is not 'access'.";
+									readonly description: "Forbidden - Token issuer is not 'access', or email and phone are not both verified.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -5989,7 +6109,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Workspace"
 							];
 							readonly summary: "Accept workspace invitation";
-							readonly description: "Accepts a workspace invitation using the provided token. Requires authentication.";
+							readonly description: "Accepts a workspace invitation using the provided token. Requires authentication and both email and phone verified.";
 							readonly security: readonly [
 								never
 							];
@@ -6048,7 +6168,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 403: {
-									readonly description: "Forbidden - Token issuer is not 'access' or user lacks workspace access.";
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, or email and phone are not both verified.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -13015,11 +13135,11 @@ declare const routes: import("hono/hono-base").HonoBase<{
 		$post: {
 			input: {};
 			output: {
-				success: false;
-				error: never;
+				success: boolean;
+				error: string | undefined;
 			};
 			outputFormat: "json";
-			status: 400;
+			status: 200 | 400;
 		} | {
 			input: {};
 			output: {
@@ -13056,11 +13176,11 @@ declare const routes: import("hono/hono-base").HonoBase<{
 		$post: {
 			input: {};
 			output: {
-				success: false;
-				error: never;
+				success: boolean;
+				error: string | undefined;
 			};
 			outputFormat: "json";
-			status: 400;
+			status: 200 | 400;
 		} | {
 			input: {};
 			output: {
@@ -13080,8 +13200,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 				success: true;
 				user: {
 					id: string;
-					email: string;
+					email: string | null;
 					phone: string | null;
+					emailVerified: boolean;
+					phoneVerified: boolean;
 					firstName: string | null;
 					lastName: string | null;
 					profilePicture: string | null;
@@ -13515,6 +13637,20 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			};
 			outputFormat: "json";
 			status: 400;
+		} | {
+			input: {
+				param: {
+					workspace: string;
+				} & {
+					token: string;
+				};
+			};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 403;
 		} | {
 			input: {
 				param: {
@@ -14365,11 +14501,11 @@ declare const routes: import("hono/hono-base").HonoBase<{
 					email: string | null;
 					workspaceId: string;
 					description: string | null;
-					phone: string | null;
 					updated_at: string | null;
 					deleted_at: string | null;
 					verified_at: string | null;
 					suspended_at: string | null;
+					phone: string | null;
 					website: string | null;
 					companyPhone: string | null;
 					companyAddress: string | null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.62",
+  "version": "0.0.64",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,
@@ -27,7 +27,7 @@
   "devDependencies": {
     "@types/bun": "^1.3.14",
     "dts-bundle-generator": "^9.5.1",
-    "hono": "^4.13.1",
+    "hono": "^4.13.2",
     "typescript": "^5.9.3"
   }
 }