@motherbase/client 1.5.0 → 1.5.1

package/dist/mfa.js

@@ -0,0 +1,156 @@
+import { toError } from './http.js';
+const R = {
+    enable: '/api/auth/two-factor/enable',
+    disable: '/api/auth/two-factor/disable',
+    totpUri: '/api/auth/two-factor/get-totp-uri',
+    verifyTotp: '/api/auth/two-factor/verify-totp',
+    sendOtp: '/api/auth/two-factor/send-otp',
+    verifyOtp: '/api/auth/two-factor/verify-otp',
+    verifyBackupCode: '/api/auth/two-factor/verify-backup-code',
+    generateBackupCodes: '/api/auth/two-factor/generate-backup-codes',
+};
+export class MfaClient {
+    constructor(http, 
+    /** Re-reads the session after a verify, so a stepped-up token is persisted. */
+    onVerified) {
+        this.http = http;
+        this.onVerified = onVerified;
+    }
+    /**
+     * Start TOTP enrolment. Returns the otpauth URI, the secret and the backup
+     * codes. The factor is not usable until `verify()` accepts a code from it.
+     */
+    async enroll(params) {
+        try {
+            const payload = await this.http.request(R.enable, {
+                method: 'POST',
+                body: { password: params.password, ...(params.issuer ? { issuer: params.issuer } : {}) },
+                raw: true,
+            });
+            const uri = payload.totpURI ?? payload.totpUri ?? '';
+            return {
+                data: {
+                    // Better Auth has no per-factor id: the user is the factor. `totp` is
+                    // used as a stable handle so unenroll/challenge/verify have something
+                    // to take, matching the supabase-js shape.
+                    id: 'totp',
+                    type: 'totp',
+                    totp: { uri, secret: secretFromUri(uri) },
+                    backupCodes: payload.backupCodes ?? [],
+                },
+                error: null,
+            };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * For TOTP this resolves immediately and sends nothing: the code already lives
+     * on the user's device. Pass `channel` to send a second-factor code by email
+     * or SMS instead, when the project has that enabled.
+     */
+    async challenge(params = {}) {
+        if (!params.channel) {
+            return { data: { id: params.factorId ?? 'totp', expires_at: null }, error: null };
+        }
+        try {
+            await this.http.request(R.sendOtp, { method: 'POST', body: {}, raw: true });
+            return { data: { id: params.factorId ?? 'otp', expires_at: null }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * Verify a code. `code` is a TOTP code by default; set `type` to `otp` for an
+     * emailed or texted second factor, or `backup` to spend a recovery code.
+     */
+    async verify(params) {
+        // All three routes take the code under the same key.
+        const route = params.type === 'backup' ? R.verifyBackupCode : params.type === 'otp' ? R.verifyOtp : R.verifyTotp;
+        try {
+            await this.http.request(route, {
+                method: 'POST',
+                body: { code: params.code, ...(params.trustDevice ? { trustDevice: true } : {}) },
+                raw: true,
+            });
+            // Verification can hand back a stepped-up session; adopt it before the
+            // caller makes its next request with the old one.
+            await this.onVerified();
+            return { data: { verified: true }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /** Turn two-factor off. Requires the password, as enabling did. */
+    async unenroll(params) {
+        try {
+            await this.http.request(R.disable, { method: 'POST', body: { password: params.password }, raw: true });
+            return { data: { id: params.factorId ?? 'totp' }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /** Issue a fresh set of backup codes, invalidating the previous set. */
+    async regenerateBackupCodes(params) {
+        try {
+            const payload = await this.http.request(R.generateBackupCodes, {
+                method: 'POST',
+                body: { password: params.password },
+                raw: true,
+            });
+            return { data: { backupCodes: payload.backupCodes ?? [] }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * Where this session stands, supabase-js style. `currentLevel` is `aal2`
+     * once the session passed a second factor (the server marks it then);
+     * `nextLevel` is `aal2` when the user has one to pass. `currentLevel` below
+     * `nextLevel` means: ask for the code before anything sensitive.
+     * `currentAuthenticationMethods` is always empty: sessions do not record
+     * which methods produced them.
+     */
+    async getAuthenticatorAssuranceLevel() {
+        try {
+            const payload = await this.http.request('/api/auth/get-session', { raw: true });
+            if (!payload?.session) {
+                return { data: { currentLevel: null, nextLevel: null, currentAuthenticationMethods: [] }, error: null };
+            }
+            const currentLevel = payload.session.aal === 'aal2' ? 'aal2' : 'aal1';
+            const nextLevel = payload.user?.twoFactorEnabled ? 'aal2' : currentLevel;
+            return { data: { currentLevel, nextLevel, currentAuthenticationMethods: [] }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /**
+     * The user's factors. Reads the TOTP URI: getting one back means TOTP is
+     * enrolled, a failure means it is not. There is no list endpoint to call
+     * because there is no list, and inventing one client-side would be a lie about
+     * what the server models.
+     */
+    async listFactors() {
+        try {
+            await this.http.request(R.totpUri, { method: 'POST', body: {}, raw: true });
+            const factor = { id: 'totp', factor_type: 'totp', status: 'verified', friendly_name: 'TOTP' };
+            return { data: { totp: [factor], all: [factor] }, error: null };
+        }
+        catch {
+            // Not enrolled is a normal state, not an error the caller should branch on.
+            return { data: { totp: [], all: [] }, error: null };
+        }
+    }
+}
+/** Pull the `secret` query parameter out of an otpauth:// URI. */
+function secretFromUri(uri) {
+    const match = /[?&]secret=([^&]+)/i.exec(uri);
+    return match ? decodeURIComponent(match[1]) : '';
+}
+//# sourceMappingURL=mfa.js.map

package/dist/mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../src/mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsDpC,MAAM,CAAC,GAAG;IACR,MAAM,EAAE,6BAA6B;IACrC,OAAO,EAAE,8BAA8B;IACvC,OAAO,EAAE,mCAAmC;IAC5C,UAAU,EAAE,kCAAkC;IAC9C,OAAO,EAAE,+BAA+B;IACxC,SAAS,EAAE,iCAAiC;IAC5C,gBAAgB,EAAE,yCAAyC;IAC3D,mBAAmB,EAAE,4CAA4C;CACzD,CAAC;AAEX,MAAM,OAAO,SAAS;IACpB,YACmB,IAAgB;IACjC,+EAA+E;IAC9D,UAA+B;QAF/B,SAAI,GAAJ,IAAI,CAAY;QAEhB,eAAU,GAAV,UAAU,CAAqB;IAC/C,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAA6C;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAIpC,CAAC,CAAC,MAAM,EAAE;gBACX,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACxF,GAAG,EAAE,IAAI;aACV,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE;oBACJ,sEAAsE;oBACtE,sEAAsE;oBACtE,2CAA2C;oBAC3C,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;oBACzC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;iBACvC;gBACD,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,SAA2D,EAAE;QAG3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAOZ;QACC,qDAAqD;QACrD,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACrG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACjF,GAAG,EAAE,IAAI;aACV,CAAC,CAAC;YACH,uEAAuE;YACvE,kDAAkD;YAClD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,QAAQ,CAAC,MAA+C;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,qBAAqB,CAAC,MAA4B;QACtD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA6B,CAAC,CAAC,mBAAmB,EAAE;gBACzF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACnC,GAAG,EAAE,IAAI;aACV,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,8BAA8B;QAOlC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAGpC,uBAAuB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC1G,CAAC;YACD,MAAM,YAAY,GAAgC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACnG,MAAM,SAAS,GAAgC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;YACtG,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,4BAA4B,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAc,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;CACF;AAED,kEAAkE;AAClE,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC"}

package/dist/organization.d.ts

@@ -0,0 +1,234 @@
+import type { HttpClient } from './http.js';
+import type { MotherbaseResponse } from './types.js';
+/**
+ * `client.auth.organization`: end-user organizations, their members,
+ * invitations and teams (Better Auth's organization plugin).
+ *
+ * Method names and parameters are the ones Better Auth's own client uses, so
+ * code written against `authClient.organization.*` ports by changing the
+ * receiver. Calls that take an optional `organizationId` default to the
+ * session's active organization (`setActive`).
+ *
+ * What the project's settings decide, and what happens otherwise:
+ *
+ *   * Auth · Organizations off: every call fails with a 404.
+ *   * Teams inside organizations off: the team methods fail with a 404.
+ *   * Dynamic roles (`createRole` and friends) are not exposed: the server does
+ *     not enable them, so roles are the built-in `owner`, `admin` and `member`.
+ */
+/** A role, or several. Better Auth stores several as one comma-separated string. */
+export type OrganizationRole = 'owner' | 'admin' | 'member' | (string & {});
+export interface Organization {
+    id: string;
+    name: string;
+    slug: string;
+    logo?: string | null;
+    metadata?: Record<string, unknown> | null;
+    createdAt: string;
+}
+export interface OrganizationMember {
+    id: string;
+    organizationId: string;
+    userId: string;
+    role: OrganizationRole;
+    createdAt: string;
+    user: {
+        id: string;
+        name: string;
+        email: string;
+        image?: string | null;
+    };
+}
+export type InvitationStatus = 'pending' | 'accepted' | 'rejected' | 'canceled';
+export interface OrganizationInvitation {
+    id: string;
+    organizationId: string;
+    email: string;
+    role: OrganizationRole;
+    status: InvitationStatus;
+    teamId?: string | null;
+    inviterId: string;
+    expiresAt: string;
+    createdAt: string;
+}
+export interface Team {
+    id: string;
+    name: string;
+    organizationId: string;
+    createdAt: string;
+    updatedAt?: string;
+}
+export interface TeamMember {
+    id: string;
+    teamId: string;
+    userId: string;
+    createdAt: string;
+}
+export interface FullOrganization extends Organization {
+    members: OrganizationMember[];
+    invitations: OrganizationInvitation[];
+    /** Present when teams are enabled. */
+    teams?: Team[];
+}
+/** Target an organization other than the active one. */
+interface OrganizationTarget {
+    organizationId?: string;
+}
+/** `{ resource: [actions] }`, e.g. `{ member: ['create'], invitation: ['cancel'] }`. */
+export type OrganizationPermissions = Record<string, string[]>;
+export declare class OrganizationClient {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Create an organization. The caller becomes its owner, and it becomes active unless told otherwise. */
+    create(params: {
+        name: string;
+        slug: string;
+        logo?: string;
+        metadata?: Record<string, unknown>;
+        keepCurrentActiveOrganization?: boolean;
+    }): Promise<MotherbaseResponse<Organization & {
+        members: OrganizationMember[];
+    }>>;
+    update(params: {
+        data: Partial<Pick<Organization, 'name' | 'slug' | 'logo' | 'metadata'>>;
+    } & OrganizationTarget): Promise<MotherbaseResponse<Organization>>;
+    delete(params: {
+        organizationId: string;
+    }): Promise<MotherbaseResponse<Organization>>;
+    /** Organizations the signed-in user belongs to. */
+    list(): Promise<MotherbaseResponse<Organization[]>>;
+    /**
+     * One organization with its members, invitations and teams. With no
+     * parameters, the active organization; `null` when there is none.
+     */
+    getFullOrganization(params?: {
+        organizationSlug?: string;
+        membersLimit?: number;
+    } & OrganizationTarget): Promise<MotherbaseResponse<FullOrganization | null>>;
+    /**
+     * Make an organization the session's active one, which every call taking an
+     * optional `organizationId` then defaults to. `organizationId: null` clears it.
+     */
+    setActive(params: {
+        organizationId?: string | null;
+        organizationSlug?: string;
+    }): Promise<MotherbaseResponse<FullOrganization | null>>;
+    /** Whether a slug is free. A taken slug is an error, as the server reports it. */
+    checkSlug(params: {
+        slug: string;
+    }): Promise<MotherbaseResponse<{
+        status: boolean;
+    }>>;
+    leave(params: {
+        organizationId: string;
+    }): Promise<MotherbaseResponse<OrganizationMember>>;
+    listMembers(params?: {
+        organizationSlug?: string;
+        limit?: number;
+        offset?: number;
+        sortBy?: string;
+        sortDirection?: 'asc' | 'desc';
+        filterField?: string;
+        filterValue?: string | number | boolean;
+        filterOperator?: 'eq' | 'ne' | 'lt' | 'lte' | 'gt' | 'gte' | 'in' | 'not_in' | 'contains' | 'starts_with' | 'ends_with';
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        members: OrganizationMember[];
+        total: number;
+    }>>;
+    /** The signed-in user's membership in the active organization. */
+    getActiveMember(): Promise<MotherbaseResponse<OrganizationMember>>;
+    /** A member's role. Without `userId`, the signed-in user's. */
+    getActiveMemberRole(params?: {
+        userId?: string;
+        organizationSlug?: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        role: OrganizationRole;
+    }>>;
+    removeMember(params: {
+        memberIdOrEmail: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        member: OrganizationMember;
+    }>>;
+    updateMemberRole(params: {
+        memberId: string;
+        role: OrganizationRole | OrganizationRole[];
+    } & OrganizationTarget): Promise<MotherbaseResponse<OrganizationMember>>;
+    /** Whether the signed-in user's role grants every listed action. */
+    hasPermission(params: {
+        permissions: OrganizationPermissions;
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        success: boolean;
+    }>>;
+    /** Invite by email. The project's invitation email carries the invitation id for `acceptInvitation`. */
+    inviteMember(params: {
+        email: string;
+        role: OrganizationRole | OrganizationRole[];
+        resend?: boolean;
+        teamId?: string | string[];
+    } & OrganizationTarget): Promise<MotherbaseResponse<OrganizationInvitation>>;
+    acceptInvitation(params: {
+        invitationId: string;
+    }): Promise<MotherbaseResponse<{
+        invitation: OrganizationInvitation;
+        member: OrganizationMember;
+    }>>;
+    rejectInvitation(params: {
+        invitationId: string;
+    }): Promise<MotherbaseResponse<{
+        invitation: OrganizationInvitation;
+        member: null;
+    }>>;
+    /** Withdraw an invitation that was sent. Rejecting one you received is `rejectInvitation`. */
+    cancelInvitation(params: {
+        invitationId: string;
+    }): Promise<MotherbaseResponse<OrganizationInvitation>>;
+    /** An invitation addressed to the signed-in user, with what an accept screen needs to show. */
+    getInvitation(params: {
+        id: string;
+    }): Promise<MotherbaseResponse<OrganizationInvitation & {
+        organizationName: string;
+        organizationSlug: string;
+        inviterEmail: string;
+    }>>;
+    /** Invitations an organization has sent. */
+    listInvitations(params?: OrganizationTarget): Promise<MotherbaseResponse<OrganizationInvitation[]>>;
+    /** Pending invitations addressed to the signed-in user, across organizations. */
+    listUserInvitations(): Promise<MotherbaseResponse<OrganizationInvitation[]>>;
+    createTeam(params: {
+        name: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<Team>>;
+    updateTeam(params: {
+        teamId: string;
+        data: Partial<Pick<Team, 'name'>>;
+    }): Promise<MotherbaseResponse<Team>>;
+    removeTeam(params: {
+        teamId: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        message: string;
+    }>>;
+    /** Teams of an organization. */
+    listTeams(params?: OrganizationTarget): Promise<MotherbaseResponse<Team[]>>;
+    /** `teamId: null` clears the active team. */
+    setActiveTeam(params: {
+        teamId: string | null;
+    }): Promise<MotherbaseResponse<Team | null>>;
+    /** Teams the signed-in user is in. */
+    listUserTeams(): Promise<MotherbaseResponse<Team[]>>;
+    /** Members of a team. Without `teamId`, the active team. */
+    listTeamMembers(params?: {
+        teamId?: string;
+    }): Promise<MotherbaseResponse<TeamMember[]>>;
+    /** Add an organization member to a team. */
+    addTeamMember(params: {
+        teamId: string;
+        userId: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<TeamMember>>;
+    removeTeamMember(params: {
+        teamId: string;
+        userId: string;
+    } & OrganizationTarget): Promise<MotherbaseResponse<{
+        message: string;
+    }>>;
+}
+export {};
+//# sourceMappingURL=organization.d.ts.map

package/dist/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../src/organization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AAEH,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhF,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,WAAW,EAAE,sBAAsB,EAAE,CAAC;IACtC,sCAAsC;IACtC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,wDAAwD;AACxD,UAAU,kBAAkB;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAmC/D,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAI7C,yGAAyG;IACzG,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,6BAA6B,CAAC,EAAE,OAAO,CAAC;KACzC,GAAG,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG;QAAE,OAAO,EAAE,kBAAkB,EAAE,CAAA;KAAE,CAAC,CAAC;IAIjF,MAAM,CACJ,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC,CAAA;KAAE,GAAG,kBAAkB,GACxG,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAI5C,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAIrF,mDAAmD;IACnD,IAAI,IAAI,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC,CAAC;IAInD;;;OAGG;IACH,mBAAmB,CACjB,MAAM,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAuB,GACrF,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAIvD;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CACvF,kBAAkB,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAC5C;IAID,kFAAkF;IAClF,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAIrF,KAAK,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAM1F,WAAW,CACT,MAAM,GAAE;QACN,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QACxC,cAAc,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,WAAW,CAAC;KACzH,GAAG,kBAAuB,GAC1B,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIhF,kEAAkE;IAClE,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAIlE,+DAA+D;IAC/D,mBAAmB,CACjB,MAAM,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAuB,GAC/E,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAI1D,YAAY,CACV,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAkB,GACvD,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAI9D,gBAAgB,CACd,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAAA;KAAE,GAAG,kBAAkB,GAC7F,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAIlD,oEAAoE;IACpE,aAAa,CACX,MAAM,EAAE;QAAE,WAAW,EAAE,uBAAuB,CAAA;KAAE,GAAG,kBAAkB,GACpE,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAMpD,wGAAwG;IACxG,YAAY,CACV,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC5B,GAAG,kBAAkB,GACrB,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IAItD,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CACzD,kBAAkB,CAAC;QAAE,UAAU,EAAE,sBAAsB,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,CACvF;IAID,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CACzD,kBAAkB,CAAC;QAAE,UAAU,EAAE,sBAAsB,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,CAAC,CACzE;IAID,8FAA8F;IAC9F,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IAIvG,+FAA+F;IAC/F,aAAa,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAC5C,kBAAkB,CAChB,sBAAsB,GAAG;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CACtG,CACF;IAID,4CAA4C;IAC5C,eAAe,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAIvG,iFAAiF;IACjF,mBAAmB,IAAI,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAM5E,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAI5F,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAI5G,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI7G,gCAAgC;IAChC,SAAS,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;IAI/E,6CAA6C;IAC7C,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAI1F,sCAAsC;IACtC,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;IAIpD,4DAA4D;IAC5D,eAAe,CAAC,MAAM,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;IAI5F,4CAA4C;IAC5C,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAIvH,gBAAgB,CACd,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,kBAAkB,GAC9D,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAGpD"}

package/dist/organization.js

@@ -0,0 +1,157 @@
+import { pluginGet, pluginPost } from './plugin-endpoint.js';
+const R = {
+    create: '/api/auth/organization/create',
+    update: '/api/auth/organization/update',
+    delete: '/api/auth/organization/delete',
+    list: '/api/auth/organization/list',
+    getFull: '/api/auth/organization/get-full-organization',
+    setActive: '/api/auth/organization/set-active',
+    checkSlug: '/api/auth/organization/check-slug',
+    leave: '/api/auth/organization/leave',
+    listMembers: '/api/auth/organization/list-members',
+    getActiveMember: '/api/auth/organization/get-active-member',
+    getActiveMemberRole: '/api/auth/organization/get-active-member-role',
+    removeMember: '/api/auth/organization/remove-member',
+    updateMemberRole: '/api/auth/organization/update-member-role',
+    hasPermission: '/api/auth/organization/has-permission',
+    inviteMember: '/api/auth/organization/invite-member',
+    acceptInvitation: '/api/auth/organization/accept-invitation',
+    rejectInvitation: '/api/auth/organization/reject-invitation',
+    cancelInvitation: '/api/auth/organization/cancel-invitation',
+    getInvitation: '/api/auth/organization/get-invitation',
+    listInvitations: '/api/auth/organization/list-invitations',
+    listUserInvitations: '/api/auth/organization/list-user-invitations',
+    createTeam: '/api/auth/organization/create-team',
+    updateTeam: '/api/auth/organization/update-team',
+    removeTeam: '/api/auth/organization/remove-team',
+    listTeams: '/api/auth/organization/list-teams',
+    setActiveTeam: '/api/auth/organization/set-active-team',
+    listUserTeams: '/api/auth/organization/list-user-teams',
+    listTeamMembers: '/api/auth/organization/list-team-members',
+    addTeamMember: '/api/auth/organization/add-team-member',
+    removeTeamMember: '/api/auth/organization/remove-team-member',
+};
+export class OrganizationClient {
+    constructor(http) {
+        this.http = http;
+    }
+    // Organizations
+    /** Create an organization. The caller becomes its owner, and it becomes active unless told otherwise. */
+    create(params) {
+        return pluginPost(this.http, R.create, params);
+    }
+    update(params) {
+        return pluginPost(this.http, R.update, params);
+    }
+    delete(params) {
+        return pluginPost(this.http, R.delete, params);
+    }
+    /** Organizations the signed-in user belongs to. */
+    list() {
+        return pluginGet(this.http, R.list);
+    }
+    /**
+     * One organization with its members, invitations and teams. With no
+     * parameters, the active organization; `null` when there is none.
+     */
+    getFullOrganization(params = {}) {
+        return pluginGet(this.http, R.getFull, params);
+    }
+    /**
+     * Make an organization the session's active one, which every call taking an
+     * optional `organizationId` then defaults to. `organizationId: null` clears it.
+     */
+    setActive(params) {
+        return pluginPost(this.http, R.setActive, params);
+    }
+    /** Whether a slug is free. A taken slug is an error, as the server reports it. */
+    checkSlug(params) {
+        return pluginPost(this.http, R.checkSlug, params);
+    }
+    leave(params) {
+        return pluginPost(this.http, R.leave, params);
+    }
+    // Members
+    listMembers(params = {}) {
+        return pluginGet(this.http, R.listMembers, params);
+    }
+    /** The signed-in user's membership in the active organization. */
+    getActiveMember() {
+        return pluginGet(this.http, R.getActiveMember);
+    }
+    /** A member's role. Without `userId`, the signed-in user's. */
+    getActiveMemberRole(params = {}) {
+        return pluginGet(this.http, R.getActiveMemberRole, params);
+    }
+    removeMember(params) {
+        return pluginPost(this.http, R.removeMember, params);
+    }
+    updateMemberRole(params) {
+        return pluginPost(this.http, R.updateMemberRole, params);
+    }
+    /** Whether the signed-in user's role grants every listed action. */
+    hasPermission(params) {
+        return pluginPost(this.http, R.hasPermission, params);
+    }
+    // Invitations
+    /** Invite by email. The project's invitation email carries the invitation id for `acceptInvitation`. */
+    inviteMember(params) {
+        return pluginPost(this.http, R.inviteMember, params);
+    }
+    acceptInvitation(params) {
+        return pluginPost(this.http, R.acceptInvitation, params);
+    }
+    rejectInvitation(params) {
+        return pluginPost(this.http, R.rejectInvitation, params);
+    }
+    /** Withdraw an invitation that was sent. Rejecting one you received is `rejectInvitation`. */
+    cancelInvitation(params) {
+        return pluginPost(this.http, R.cancelInvitation, params);
+    }
+    /** An invitation addressed to the signed-in user, with what an accept screen needs to show. */
+    getInvitation(params) {
+        return pluginGet(this.http, R.getInvitation, params);
+    }
+    /** Invitations an organization has sent. */
+    listInvitations(params = {}) {
+        return pluginGet(this.http, R.listInvitations, params);
+    }
+    /** Pending invitations addressed to the signed-in user, across organizations. */
+    listUserInvitations() {
+        return pluginGet(this.http, R.listUserInvitations);
+    }
+    // Teams (require "Teams inside organizations")
+    createTeam(params) {
+        return pluginPost(this.http, R.createTeam, params);
+    }
+    updateTeam(params) {
+        return pluginPost(this.http, R.updateTeam, params);
+    }
+    removeTeam(params) {
+        return pluginPost(this.http, R.removeTeam, params);
+    }
+    /** Teams of an organization. */
+    listTeams(params = {}) {
+        return pluginGet(this.http, R.listTeams, params);
+    }
+    /** `teamId: null` clears the active team. */
+    setActiveTeam(params) {
+        return pluginPost(this.http, R.setActiveTeam, params);
+    }
+    /** Teams the signed-in user is in. */
+    listUserTeams() {
+        return pluginGet(this.http, R.listUserTeams);
+    }
+    /** Members of a team. Without `teamId`, the active team. */
+    listTeamMembers(params = {}) {
+        return pluginGet(this.http, R.listTeamMembers, params);
+    }
+    /** Add an organization member to a team. */
+    addTeamMember(params) {
+        return pluginPost(this.http, R.addTeamMember, params);
+    }
+    removeTeamMember(params) {
+        return pluginPost(this.http, R.removeTeamMember, params);
+    }
+}
+//# sourceMappingURL=organization.js.map

package/dist/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../src/organization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAsF7D,MAAM,CAAC,GAAG;IACR,MAAM,EAAE,+BAA+B;IACvC,MAAM,EAAE,+BAA+B;IACvC,MAAM,EAAE,+BAA+B;IACvC,IAAI,EAAE,6BAA6B;IACnC,OAAO,EAAE,8CAA8C;IACvD,SAAS,EAAE,mCAAmC;IAC9C,SAAS,EAAE,mCAAmC;IAC9C,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,qCAAqC;IAClD,eAAe,EAAE,0CAA0C;IAC3D,mBAAmB,EAAE,+CAA+C;IACpE,YAAY,EAAE,sCAAsC;IACpD,gBAAgB,EAAE,2CAA2C;IAC7D,aAAa,EAAE,uCAAuC;IACtD,YAAY,EAAE,sCAAsC;IACpD,gBAAgB,EAAE,0CAA0C;IAC5D,gBAAgB,EAAE,0CAA0C;IAC5D,gBAAgB,EAAE,0CAA0C;IAC5D,aAAa,EAAE,uCAAuC;IACtD,eAAe,EAAE,yCAAyC;IAC1D,mBAAmB,EAAE,8CAA8C;IACnE,UAAU,EAAE,oCAAoC;IAChD,UAAU,EAAE,oCAAoC;IAChD,UAAU,EAAE,oCAAoC;IAChD,SAAS,EAAE,mCAAmC;IAC9C,aAAa,EAAE,wCAAwC;IACvD,aAAa,EAAE,wCAAwC;IACvD,eAAe,EAAE,0CAA0C;IAC3D,aAAa,EAAE,wCAAwC;IACvD,gBAAgB,EAAE,2CAA2C;CACrD,CAAC;AAEX,MAAM,OAAO,kBAAkB;IAC7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,gBAAgB;IAEhB,yGAAyG;IACzG,MAAM,CAAC,MAMN;QACC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CACJ,MAAyG;QAEzG,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,MAAkC;QACvC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,mDAAmD;IACnD,IAAI;QACF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,mBAAmB,CACjB,SAAoF,EAAE;QAEtF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,MAAqE;QAG7E,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,kFAAkF;IAClF,SAAS,CAAC,MAAwB;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,MAAkC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,UAAU;IAEV,WAAW,CACT,SASyB,EAAE;QAE3B,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,kEAAkE;IAClE,eAAe;QACb,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC;IAED,+DAA+D;IAC/D,mBAAmB,CACjB,SAA8E,EAAE;QAEhF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,YAAY,CACV,MAAwD;QAExD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CACd,MAA8F;QAE9F,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,oEAAoE;IACpE,aAAa,CACX,MAAqE;QAErE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,cAAc;IAEd,wGAAwG;IACxG,YAAY,CACV,MAKsB;QAEtB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CAAC,MAAgC;QAG/C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,gBAAgB,CAAC,MAAgC;QAG/C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,8FAA8F;IAC9F,gBAAgB,CAAC,MAAgC;QAC/C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,+FAA+F;IAC/F,aAAa,CAAC,MAAsB;QAKlC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,4CAA4C;IAC5C,eAAe,CAAC,SAA6B,EAAE;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,iFAAiF;IACjF,mBAAmB;QACjB,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC;IAED,+CAA+C;IAE/C,UAAU,CAAC,MAA6C;QACtD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CAAC,MAA6D;QACtE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CAAC,MAA+C;QACxD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,gCAAgC;IAChC,SAAS,CAAC,SAA6B,EAAE;QACvC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,6CAA6C;IAC7C,aAAa,CAAC,MAAiC;QAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,sCAAsC;IACtC,aAAa;QACX,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;IAED,4DAA4D;IAC5D,eAAe,CAAC,SAA8B,EAAE;QAC9C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,4CAA4C;IAC5C,aAAa,CAAC,MAA+D;QAC3E,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,gBAAgB,CACd,MAA+D;QAE/D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/passkey.d.ts

@@ -0,0 +1,59 @@
+import type { HttpClient } from './http.js';
+import type { MotherbaseResponse, User } from './types.js';
+/**
+ * `client.auth.passkey`: the signed-in user's passkeys (Better Auth's passkey
+ * plugin). Signing in with one is `client.auth.signInWithPasskey()`.
+ *
+ * A passkey here is a first factor: it signs the user in on its own. supabase-js
+ * only knows WebAuthn as a second factor (`mfa.enroll({ factorType: 'webauthn' })`),
+ * so this is a separate namespace rather than a `mfa` factor that would sign in
+ * where supabase-js code expects a step-up.
+ *
+ * The browser ceremony uses WebAuthn's JSON methods
+ * (`PublicKeyCredential.parseCreationOptionsFromJSON` and `toJSON()`), so there
+ * is no encoding dependency. A runtime without them (React Native, Node, an old
+ * browser) gets an error result, not a crash.
+ */
+export interface Passkey {
+    id: string;
+    name?: string | null;
+    userId: string;
+    credentialID: string;
+    deviceType: 'singleDevice' | 'multiDevice';
+    /** Synced by the platform (iCloud Keychain, Google Password Manager). */
+    backedUp: boolean;
+    transports?: string;
+    aaguid?: string | null;
+    createdAt: string;
+}
+export declare class PasskeyClient {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Create a passkey on this device for the signed-in user. Prompts the browser's passkey UI. */
+    register(params?: {
+        name?: string;
+        authenticatorAttachment?: 'platform' | 'cross-platform';
+    }): Promise<MotherbaseResponse<Passkey>>;
+    list(): Promise<MotherbaseResponse<Passkey[]>>;
+    /** Rename a passkey. */
+    update(params: {
+        id: string;
+        name: string;
+    }): Promise<MotherbaseResponse<{
+        passkey: Passkey;
+    }>>;
+    delete(params: {
+        id: string;
+    }): Promise<MotherbaseResponse<{
+        status: boolean;
+    }>>;
+}
+/**
+ * The sign-in half of the ceremony, for `AuthClient.signInWithPasskey`, which
+ * owns persisting the session. Resolves with the Better Auth session token.
+ */
+export declare function authenticateWithPasskey(http: HttpClient): Promise<MotherbaseResponse<{
+    token: string;
+    user: User;
+}>>;
+//# sourceMappingURL=passkey.d.ts.map

package/dist/passkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.d.ts","sourceRoot":"","sources":["../src/passkey.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,GAAG,aAAa,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAiBD,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,gGAAgG;IAC1F,QAAQ,CACZ,MAAM,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,uBAAuB,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAA;KAAO,GACtF,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAyBvC,IAAI,IAAI,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC;IAI9C,wBAAwB;IACxB,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI/F,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAGjF;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,kBAAkB,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC,CA4B5D"}