@misiki/gocommerce-connector 0.4.4 → 0.4.5

package/dist/{index-BNYk4TS2.d.cts → index-CmPI-hcH.d.cts}

@@ -4901,15 +4901,35 @@ declare class UserService extends BaseService {
     deleteUser(): Promise<never>;
     checkEmail(): Promise<never>;
     joinAsVendor(): Promise<never>;
-    private signedIn;
+    protected signedIn(auth: AuthResponse): Promise<{
+        id: string;
+        userId: string;
+        email: string;
+        phone: string | null;
+        firstName: string;
+        lastName: string;
+        name: string;
+        fullName: string;
+        avatar: null;
+        role: string;
+        emailVerified: boolean;
+        storeId: null;
+    }>;
     /** An identity call, with a 404 from a build without the module said in words. */
     protected account<T>(path: string, req?: Parameters<BaseService['engine']>[1]): Promise<T>;
 }
 /**
- * Password resets and email confirmation. Phone sign-in by one-time code is a
- * Litekart flow; the engine has no such thing and says so.
+ * Password resets, email confirmation, and phone sign-in. A store signs its
+ * customers in one way (D116), read from `loginMethod`; the engine refuses
+ * the other.
  */
 declare class AuthService extends UserService {
+    private readonly facts;
+    /**
+     * How this store signs customers in: `email_password` or `phone_otp`.
+     * A store whose accounts module says nothing signs in by email.
+     */
+    loginMethod(): Promise<'email_password' | 'phone_otp'>;
     forgotPassword({ email }: {
         email: string;
         referrer?: string;
@@ -4956,8 +4976,30 @@ declare class AuthService extends UserService {
         errorCode: string;
         message: string;
     }>;
-    getOtp(): Promise<never>;
-    verifyOtp(): Promise<never>;
+    /** Texts a 4-digit sign-in code to `phone`, which needs its country code. */
+    getOtp({ phone }: {
+        phone: string;
+    }): Promise<{
+        expiresInMinutes: number;
+    }>;
+    /** Signs in the account on `phone` with the code it was sent, opening one the first time. */
+    verifyOtp({ phone, otp }: {
+        phone: string;
+        otp: string;
+    }): Promise<{
+        id: string;
+        userId: string;
+        email: string;
+        phone: string | null;
+        firstName: string;
+        lastName: string;
+        name: string;
+        fullName: string;
+        avatar: null;
+        role: string;
+        emailVerified: boolean;
+        storeId: null;
+    }>;
     joinAsAdmin(): Promise<never>;
 }
 /** The `/my/profile` form: the same account, read and saved. */

package/dist/{index-BNYk4TS2.d.ts → index-CmPI-hcH.d.ts}

@@ -4901,15 +4901,35 @@ declare class UserService extends BaseService {
     deleteUser(): Promise<never>;
     checkEmail(): Promise<never>;
     joinAsVendor(): Promise<never>;
-    private signedIn;
+    protected signedIn(auth: AuthResponse): Promise<{
+        id: string;
+        userId: string;
+        email: string;
+        phone: string | null;
+        firstName: string;
+        lastName: string;
+        name: string;
+        fullName: string;
+        avatar: null;
+        role: string;
+        emailVerified: boolean;
+        storeId: null;
+    }>;
     /** An identity call, with a 404 from a build without the module said in words. */
     protected account<T>(path: string, req?: Parameters<BaseService['engine']>[1]): Promise<T>;
 }
 /**
- * Password resets and email confirmation. Phone sign-in by one-time code is a
- * Litekart flow; the engine has no such thing and says so.
+ * Password resets, email confirmation, and phone sign-in. A store signs its
+ * customers in one way (D116), read from `loginMethod`; the engine refuses
+ * the other.
  */
 declare class AuthService extends UserService {
+    private readonly facts;
+    /**
+     * How this store signs customers in: `email_password` or `phone_otp`.
+     * A store whose accounts module says nothing signs in by email.
+     */
+    loginMethod(): Promise<'email_password' | 'phone_otp'>;
     forgotPassword({ email }: {
         email: string;
         referrer?: string;
@@ -4956,8 +4976,30 @@ declare class AuthService extends UserService {
         errorCode: string;
         message: string;
     }>;
-    getOtp(): Promise<never>;
-    verifyOtp(): Promise<never>;
+    /** Texts a 4-digit sign-in code to `phone`, which needs its country code. */
+    getOtp({ phone }: {
+        phone: string;
+    }): Promise<{
+        expiresInMinutes: number;
+    }>;
+    /** Signs in the account on `phone` with the code it was sent, opening one the first time. */
+    verifyOtp({ phone, otp }: {
+        phone: string;
+        otp: string;
+    }): Promise<{
+        id: string;
+        userId: string;
+        email: string;
+        phone: string | null;
+        firstName: string;
+        lastName: string;
+        name: string;
+        fullName: string;
+        avatar: null;
+        role: string;
+        emailVerified: boolean;
+        storeId: null;
+    }>;
     joinAsAdmin(): Promise<never>;
 }
 /** The `/my/profile` form: the same account, read and saved. */

package/dist/index.cjs

@@ -2205,6 +2205,19 @@ var UserService = class extends BaseService {
   }
 };
 var AuthService = class extends UserService {
+  facts = new StoreFacts(this._fetch);
+  /**
+   * How this store signs customers in: `email_password` or `phone_otp`.
+   * A store whose accounts module says nothing signs in by email.
+   */
+  async loginMethod() {
+    try {
+      const method = (await this.facts.plugins()).get("identity")?.settings?.login_method;
+      return method === "phone_otp" ? "phone_otp" : "email_password";
+    } catch {
+      return "email_password";
+    }
+  }
   async forgotPassword({ email }) {
     return this.account("/x/identity/password-reset", {
       method: "POST",
@@ -2231,11 +2244,21 @@ var AuthService = class extends UserService {
       return { errorCode: err.code ?? "invalid_token", message: err.message };
     }
   }
-  async getOtp() {
-    throw new NotSupportedError("AuthService", "getOtp", "sign in with an email and password");
+  /** Texts a 4-digit sign-in code to `phone`, which needs its country code. */
+  async getOtp({ phone }) {
+    const res = await this.account("/x/identity/otp", {
+      method: "POST",
+      body: { phone: String(phone ?? "").trim() }
+    });
+    return { expiresInMinutes: res?.expires_in_minutes ?? 10 };
   }
-  async verifyOtp() {
-    throw new NotSupportedError("AuthService", "verifyOtp", "sign in with an email and password");
+  /** Signs in the account on `phone` with the code it was sent, opening one the first time. */
+  async verifyOtp({ phone, otp }) {
+    const auth = await this.account("/x/identity/otp/verify", {
+      method: "POST",
+      body: { phone: String(phone ?? "").trim(), code: String(otp ?? "").trim() }
+    });
+    return this.signedIn(auth);
   }
   async joinAsAdmin() {
     throw new NotSupportedError("AuthService", "joinAsAdmin", "operators are invited from the admin panel");
@@ -2587,7 +2610,11 @@ var StoreService = class extends BaseService {
           ...flag(plugins.has("product-reviews"))
         }
       },
-      ...menus?.length ? { menu: menus } : {}
+      ...menus?.length ? { menu: menus } : {},
+      // The one way this store signs customers in (D116), which the sign-in
+      // form reads as PHONE or EMAIL. Without the accounts module the static
+      // record says.
+      ...plugins.has("identity") ? { loginType: plugins.get("identity")?.settings?.login_method === "phone_otp" ? "PHONE" : "EMAIL" } : {}
     };
   }
 };