@mestra-dev/contract 0.0.63 → 0.0.65

package/dist/index.d.ts

@@ -167,10 +167,25 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									readonly example: "2025-01-20T10:30:00.000Z";
 								};
 								readonly error: {
-									readonly type: "object";
 									readonly nullable: true;
-									readonly description: "Validation error details when the payload is invalid.";
-									readonly additionalProperties: true;
+									readonly description: "Validation details (object) or a linking error string such as Phone already in use.";
+									readonly oneOf: readonly [
+										{
+											readonly type: "object";
+											readonly additionalProperties: true;
+										},
+										{
+											readonly type: "string";
+											readonly enum: readonly [
+												"User not found",
+												"Phone is already verified",
+												"Email is already verified",
+												"Phone already in use",
+												"Email already in use",
+												"An active OTP already exists"
+											];
+										}
+									];
 								};
 							};
 						};
@@ -192,7 +207,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 								readonly refreshToken: {
 									readonly type: "string";
-									readonly description: "JWT refresh token (expires in 12 hours or 7 days when keepSignIn is true). Claims include email and userId.";
+									readonly description: "JWT refresh token (expires in 7 days, or 30 days when keepSignIn is true). Claims include email and userId.";
 								};
 							};
 						};
@@ -219,10 +234,25 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									readonly example: null;
 								};
 								readonly error: {
-									readonly type: "object";
 									readonly nullable: true;
-									readonly description: "Validation error details when the payload is invalid.";
-									readonly additionalProperties: true;
+									readonly description: "Validation details (object) or a linking error string.";
+									readonly oneOf: readonly [
+										{
+											readonly type: "object";
+											readonly additionalProperties: true;
+										},
+										{
+											readonly type: "string";
+											readonly enum: readonly [
+												"User not found",
+												"Invalid or expired OTP",
+												"Phone is already verified",
+												"Email is already verified",
+												"Phone already in use",
+												"Email already in use"
+											];
+										}
+									];
 								};
 							};
 						};
@@ -4560,7 +4590,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or an active OTP already exists.";
+									readonly description: "Validation failed, an active OTP already exists, or linking was rejected (email already verified / in use).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4569,6 +4599,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 							};
 						};
 					};
@@ -4605,7 +4645,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 												};
 												readonly keepSignIn: {
 													readonly type: "boolean";
-													readonly description: "Extend refresh token validity to 7 days when true (default 12 hours).";
+													readonly description: "Login only. Extend refresh token validity to 30 days when true (default 7 days). Ignored when linking a contact.";
 												};
 											};
 										};
@@ -4614,17 +4654,24 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 							readonly responses: {
 								readonly 200: {
-									readonly description: "OTP verified successfully.";
+									readonly description: "Login returns tokens. Linking an email to the current account returns success only (no new tokens).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
-												readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+												readonly oneOf: readonly [
+													{
+														readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+													},
+													{
+														readonly $ref: "#/components/schemas/SimpleSuccess";
+													}
+												];
 											};
 										};
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or OTP is invalid/expired.";
+									readonly description: "Validation failed, OTP is invalid/expired, or linking was rejected.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4633,6 +4680,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4652,7 +4709,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Request a one-time password by SMS";
-							readonly description: "Without a bearer token this starts SMS login/signup. With an access token it links a phone to the current account (for users who signed in with email). SMS is sent via Kod.mobi only when dialCode is +7.";
+							readonly description: "Without a bearer token this starts SMS login/signup. With an access token it links a phone to the current account (for users who signed in with email). SMS is sent via Kod.mobi only when dialCode is +7. Dial code +98 does not send SMS; the OTP is always 987321 for testing.";
 							readonly security: readonly [
 								never
 							];
@@ -4694,7 +4751,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or an active OTP already exists.";
+									readonly description: "Validation failed, an active OTP already exists, or linking was rejected (phone already verified / in use).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4703,6 +4760,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4755,7 +4822,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 												};
 												readonly keepSignIn: {
 													readonly type: "boolean";
-													readonly description: "Extend refresh token validity to 30 days when true (default 7 days).";
+													readonly description: "Login only. Extend refresh token validity to 30 days when true (default 7 days). Ignored when linking a contact.";
 												};
 											};
 										};
@@ -4764,17 +4831,24 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 							readonly responses: {
 								readonly 200: {
-									readonly description: "OTP verified successfully.";
+									readonly description: "Login returns tokens. Linking a phone to the current account returns success only (no new tokens).";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
-												readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+												readonly oneOf: readonly [
+													{
+														readonly $ref: "#/components/schemas/VerifyOtpSuccess";
+													},
+													{
+														readonly $ref: "#/components/schemas/SimpleSuccess";
+													}
+												];
 											};
 										};
 									};
 								};
 								readonly 400: {
-									readonly description: "Validation failed or OTP is invalid/expired.";
+									readonly description: "Validation failed, OTP is invalid/expired, or linking was rejected.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -4783,6 +4857,16 @@ declare const routes: import("hono/hono-base").HonoBase<{
 										};
 									};
 								};
+								readonly 403: {
+									readonly description: "Authorization header was sent but the access token is missing, invalid, or expired.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
 								readonly 429: {
 									readonly description: "Too Many Requests - Rate limit exceeded.";
 									readonly content: {
@@ -4802,7 +4886,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Auth"
 							];
 							readonly summary: "Get current authenticated user";
-							readonly description: "Returns the user profile for the `userId` claim on the provided access token.";
+							readonly description: "Returns the user profile for the `userId` claim on the provided access token. SMS-only accounts have `email: null` until an email is linked. Use `emailVerified` and `phoneVerified` to decide whether the user can create a workspace or accept an invite.";
 							readonly security: readonly [
 								never
 							];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.63",
+  "version": "0.0.65",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,
@@ -27,7 +27,7 @@
   "devDependencies": {
     "@types/bun": "^1.3.14",
     "dts-bundle-generator": "^9.5.1",
-    "hono": "^4.13.1",
+    "hono": "^4.13.2",
     "typescript": "^5.9.3"
   }
 }