@nexys/user-management-client 0.1.0

package/README.md

@@ -0,0 +1,81 @@
+# `@nexys/user-management-client`
+
+Tiny TypeScript client for the `user-management-rs` axum API.
+No React, no DOM. Endpoints are plain data, calls return `Result`,
+nothing throws.
+
+The wire types are kept byte-for-byte aligned with
+`rust/crates/um-server/src/wire.rs`.
+
+## Pattern
+
+```ts
+type Endpoint<Input, Output, Err> = {
+  method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+  path: (input: Input) => string;
+  body?: (input: Input) => unknown;
+  query?: (input: Input) => Record<string, string | number | boolean | undefined | null>;
+  parseOutput: (data: unknown) => Output;
+  parseError: (status: number, data: unknown) => Err;
+};
+
+type Result<T, E> = { ok: true; data: T } | { ok: false; error: E };
+```
+
+An `Endpoint` is pure data. `createClient({ baseUrl }).call(endpoint, input)`
+is the only execution path; it returns
+`Result<Output, Err | { kind: "network" }>` and never throws.
+
+## Usage
+
+```ts
+import { createClient, signIn } from "@nexys/user-management-client";
+
+const um = createClient({
+  baseUrl: "https://auth.example.com",
+  onUnauthorized: () => location.assign("/sign-in"),
+});
+
+const res = await um.call(signIn, { email, password });
+if (res.ok) {
+  console.log("welcome", res.data.user.email);
+} else if (res.error.kind === "network") {
+  toast("Can't reach the server.");
+} else {
+  // res.error.kind === "http"
+  toast(res.error.message);
+  if (res.error.code === "INVALID_EMAIL_OR_PASSWORD") highlightFields();
+}
+```
+
+For endpoints whose Input is `void`, the second arg is omitted:
+
+```ts
+const me = await um.call(meEndpoint);
+```
+
+## Endpoints (all named exports)
+
+- **Auth**: `signUp`, `signIn`, `signOut`, `requestPasswordReset`, `resetPassword`, `requestMagicLink`, `changePassword`
+- **Identity**: `me`, `mintToken`, `refreshToken`, `updateProfile`
+- **Refresh tokens**: `listRefreshTokens`, `revokeRefreshToken`, `revokeAllRefreshTokens`
+- **Admin users**: `adminListUsers`, `adminSetUserStatus`, `adminSetUserRole`, `adminRevokeUserTokens`
+- **Tenants**: `adminListTenants`, `createTenant`, `setActiveTenant`, `getFullTenant`, `inviteMember`, `acceptInvitation`, `updateMemberRole`, `removeMember`
+
+Custom endpoints look the same; drop one in and it composes with `call`:
+
+```ts
+const myEndpoint: Endpoint<{ id: string }, Thing, ApiError> = {
+  method: "GET",
+  path: ({ id }) => `/api/things/${id}`,
+  parseOutput: (d) => d as Thing,
+  parseError: parseApiError,
+};
+```
+
+## Tests
+
+```bash
+bun test           # 9 hermetic tests using a mock fetch
+bun run typecheck
+```

package/dist/endpoint.d.ts

@@ -0,0 +1,51 @@
+import type { NetworkError, Result } from "./result.js";
+export type Method = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+/**
+ * An Endpoint is plain data — no execution, no transport. It says
+ * "this is how the URL is shaped, how to encode the body, and how to
+ * parse the response (ok or error)". Run it with `call(endpoint, input)`.
+ */
+export interface Endpoint<Input, Output, Err> {
+    method: Method;
+    path: (input: Input) => string;
+    /** Returns the JSON body. Omit for GET / DELETE. */
+    body?: (input: Input) => unknown;
+    /** Returns query params; undefined / null entries are dropped. */
+    query?: (input: Input) => Record<string, string | number | boolean | undefined | null>;
+    parseOutput: (data: unknown) => Output;
+    parseError: (status: number, data: unknown) => Err;
+}
+export interface ClientConfig {
+    /** API base URL — e.g. https://auth.example.com (no trailing slash). */
+    baseUrl: string;
+    /** Override the global fetch (SSR / tests). */
+    fetch?: typeof fetch;
+    /** Headers merged into every request. */
+    headers?: Record<string, string>;
+    /** Fired whenever the server returns 401 — typically triggers a re-login flow. */
+    onUnauthorized?: () => void;
+}
+/**
+ * Pull I, O, E out of a concrete endpoint so call() can be typed
+ * without callers spelling the parameters.
+ */
+export type EndpointInput<E> = E extends Endpoint<infer I, unknown, unknown> ? I : never;
+export type EndpointOutput<E> = E extends Endpoint<unknown, infer O, unknown> ? O : never;
+export type EndpointError<E> = E extends Endpoint<unknown, unknown, infer Err> ? Err : never;
+/** "If Input is void, omit the input arg" trick. */
+type CallArgs<I> = [I] extends [void] ? [] : [input: I];
+export interface UmClient {
+    /** Execute an endpoint. Never throws — returns Result. */
+    call<I, O, E>(endpoint: Endpoint<I, O, E>, ...args: CallArgs<I>): Promise<Result<O, E | NetworkError>>;
+}
+/**
+ * Build a client. The returned object exposes a single `call` method;
+ * everything else is endpoint data.
+ *
+ *   const um = createClient({ baseUrl: "https://auth.example.com" });
+ *   const res = await um.call(signIn, { email, password });
+ *   if (res.ok) { … } else { … }
+ */
+export declare const createClient: (config: ClientConfig) => UmClient;
+export {};
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC;IAC/B,oDAAoD;IACpD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACjC,kEAAkE;IAClE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IACvF,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,GAAG,CAAC;CACpD;AAED,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AACzF,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAC1F,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC;AAE7F,oDAAoD;AACpD,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAExD,MAAM,WAAW,QAAQ;IACvB,0DAA0D;IAC1D,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACV,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC3B,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;CACzC;AAgBD;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ,YAAY,KAAG,QAkDnD,CAAC"}

package/dist/endpoint.js

@@ -0,0 +1,65 @@
+const stripTrailing = (b) => b.replace(/\/+$/, "");
+const encodeQuery = (q) => {
+    if (!q)
+        return "";
+    const parts = [];
+    for (const [k, v] of Object.entries(q)) {
+        if (v === undefined || v === null || v === "")
+            continue;
+        parts.push(`${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`);
+    }
+    return parts.length ? `?${parts.join("&")}` : "";
+};
+/**
+ * Build a client. The returned object exposes a single `call` method;
+ * everything else is endpoint data.
+ *
+ *   const um = createClient({ baseUrl: "https://auth.example.com" });
+ *   const res = await um.call(signIn, { email, password });
+ *   if (res.ok) { … } else { … }
+ */
+export const createClient = (config) => {
+    const baseUrl = stripTrailing(config.baseUrl);
+    const fetcher = config.fetch ?? globalThis.fetch?.bind(globalThis);
+    return {
+        call: async (endpoint, ...args) => {
+            const input = args[0] ?? undefined;
+            const url = `${baseUrl}${endpoint.path(input)}${encodeQuery(endpoint.query?.(input))}`;
+            const init = {
+                method: endpoint.method,
+                credentials: "include",
+                headers: {
+                    accept: "application/json",
+                    ...(endpoint.body ? { "content-type": "application/json" } : {}),
+                    ...(config.headers ?? {}),
+                },
+                ...(endpoint.body ? { body: JSON.stringify(endpoint.body(input)) } : {}),
+            };
+            let res;
+            try {
+                res = await fetcher(url, init);
+            }
+            catch (e) {
+                return {
+                    ok: false,
+                    error: {
+                        kind: "network",
+                        message: e instanceof Error ? e.message : String(e),
+                    },
+                };
+            }
+            // 204 No Content — no body to parse. Endpoints that legitimately
+            // return 204 should set parseOutput to accept null.
+            const data = res.status === 204
+                ? null
+                : await res.json().catch(() => null);
+            if (res.status === 401)
+                config.onUnauthorized?.();
+            if (!res.ok) {
+                return { ok: false, error: endpoint.parseError(res.status, data) };
+            }
+            return { ok: true, data: endpoint.parseOutput(data) };
+        },
+    };
+};
+//# sourceMappingURL=endpoint.js.map

package/dist/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAkDA,MAAM,aAAa,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnE,MAAM,WAAW,GAAG,CAClB,CAA2E,EACnE,EAAE;IACV,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACxD,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAY,EAAE;IAC7D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAK,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAkB,CAAC;IAErF,OAAO;QACL,IAAI,EAAE,KAAK,EACT,QAA2B,EAC3B,GAAG,IAAiB,EACkB,EAAE;YACxC,MAAM,KAAK,GAAI,IAAI,CAAC,CAAC,CAAO,IAAK,SAAe,CAAC;YACjD,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,GAAgB;gBACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC1B;gBACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC;YAEF,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;qBACpD;iBACF,CAAC;YACJ,CAAC;YAED,iEAAiE;YACjE,oDAAoD;YACpD,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,GAAG;gBAChB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAEzC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YAElD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACrE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/endpoints/admin-audit.d.ts

@@ -0,0 +1,38 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+export interface AuditLogRow {
+    id: string;
+    action: string;
+    actorId: string | null;
+    actorEmail: string | null;
+    actorType: string | null;
+    resourceType: string | null;
+    resourceId: string | null;
+    organizationId: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    metadata: unknown;
+    success: boolean;
+    createdAt: string;
+}
+export interface AuditLogListResponse {
+    total: number;
+    rows: AuditLogRow[];
+}
+/**
+ * Query filters supported by `/api/admin/audit-logs`.
+ * Mirrors `apps/server/crates/um-server/src/routes/admin_audit.rs` — keep
+ * field names + semantics aligned with the server's `ListQuery`. Note:
+ * `actionPrefix` is a prefix match; there's no exact-action filter.
+ */
+export interface AdminListAuditLogsInput {
+    actorId?: string;
+    actionPrefix?: string;
+    organizationId?: string;
+    since?: string;
+    until?: string;
+    limit?: number;
+    offset?: number;
+}
+export declare const adminListAuditLogs: Endpoint<AdminListAuditLogsInput, AuditLogListResponse, ApiError>;
+//# sourceMappingURL=admin-audit.d.ts.map

package/dist/endpoints/admin-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-audit.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,EAAE,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC,uBAAuB,EACvB,oBAAoB,EACpB,QAAQ,CAeT,CAAC"}

package/dist/endpoints/admin-audit.js

@@ -0,0 +1,17 @@
+import { parseApiError } from "../result.js";
+export const adminListAuditLogs = {
+    method: "GET",
+    path: () => "/api/admin/audit-logs",
+    query: (input) => ({
+        actorId: input.actorId,
+        actionPrefix: input.actionPrefix,
+        organizationId: input.organizationId,
+        since: input.since,
+        until: input.until,
+        limit: input.limit,
+        offset: input.offset,
+    }),
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+//# sourceMappingURL=admin-audit.js.map

package/dist/endpoints/admin-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-audit.js","sourceRoot":"","sources":["../../src/endpoints/admin-audit.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAuC7C,MAAM,CAAC,MAAM,kBAAkB,GAI3B;IACF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,uBAAuB;IACnC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IACF,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA4B;IACnD,UAAU,EAAE,aAAa;CAC1B,CAAC"}

package/dist/endpoints/admin-keys.d.ts

@@ -0,0 +1,23 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+export interface AdminKeyRow {
+    kid: string;
+    alg: string;
+    status: "active" | "retired" | "revoked" | (string & {});
+    createdAt: string;
+    retiredAt: string | null;
+    revokedAt: string | null;
+}
+export declare const adminListKeys: Endpoint<void, {
+    keys: AdminKeyRow[];
+}, ApiError>;
+export declare const adminRotateKey: Endpoint<void, {
+    kid: string;
+    createdAt: string;
+}, ApiError>;
+export declare const adminRevokeKey: Endpoint<{
+    kid: string;
+}, {
+    ok: true;
+}, ApiError>;
+//# sourceMappingURL=admin-keys.d.ts.map

package/dist/endpoints/admin-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-keys.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,WAAW,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK3E,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAAQ,CACnC,IAAI,EACJ;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAClC,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EAAE,QAAQ,CAK5E,CAAC"}

package/dist/endpoints/admin-keys.js

@@ -0,0 +1,20 @@
+import { parseApiError } from "../result.js";
+export const adminListKeys = {
+    method: "GET",
+    path: () => "/api/admin/keys",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminRotateKey = {
+    method: "POST",
+    path: () => "/api/admin/keys/rotate",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminRevokeKey = {
+    method: "POST",
+    path: ({ kid }) => `/api/admin/keys/${encodeURIComponent(kid)}/revoke`,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+//# sourceMappingURL=admin-keys.js.map

package/dist/endpoints/admin-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-keys.js","sourceRoot":"","sources":["../../src/endpoints/admin-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAW7C,MAAM,CAAC,MAAM,aAAa,GAAsD;IAC9E,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,iBAAiB;IAC7B,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA+B;IACtD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAIvB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB;IACpC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA0C;IACjE,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAsD;IAC/E,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,SAAS;IACtE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC"}

package/dist/endpoints/admin-users.d.ts

@@ -0,0 +1,56 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+import type { AdminUserDetail, AdminUserListResponse, UserRole, UserRoleRow, UserStatus } from "../types.js";
+export interface AdminListUsersInput {
+    status?: UserStatus;
+    includeDeleted?: boolean;
+    limit?: number;
+    offset?: number;
+}
+export declare const adminListUsers: Endpoint<AdminListUsersInput, AdminUserListResponse, ApiError>;
+export interface SetUserStatusResponse {
+    ok: true;
+    status: UserStatus;
+    sessionsRevoked: number;
+    refreshTokensRevoked: number;
+}
+export declare const adminSetUserStatus: Endpoint<{
+    userId: string;
+    status: UserStatus;
+}, SetUserStatusResponse, ApiError>;
+export declare const adminSetUserRole: Endpoint<{
+    userId: string;
+    role: UserRole;
+}, {
+    ok: true;
+}, ApiError>;
+export declare const adminRevokeUserTokens: Endpoint<{
+    userId: string;
+}, {
+    ok: true;
+    sessionsRevoked: number;
+    refreshTokensRevoked: number;
+}, ApiError>;
+export declare const adminGetUser: Endpoint<{
+    userId: string;
+}, AdminUserDetail, ApiError>;
+export declare const adminDeleteUser: Endpoint<{
+    userId: string;
+}, {
+    ok: true;
+}, ApiError>;
+export declare const adminGetUserRoles: Endpoint<{
+    userId: string;
+    organizationId: string;
+}, {
+    roles: UserRoleRow[];
+}, ApiError>;
+export declare const adminToggleUserRole: Endpoint<{
+    userId: string;
+    organizationId: string;
+    roleId: string;
+    assign: boolean;
+}, {
+    ok: true;
+}, ApiError>;
+//# sourceMappingURL=admin-users.d.ts.map

package/dist/endpoints/admin-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-users.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,QAAQ,EACR,WAAW,EACX,UAAU,EACX,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,cAAc,EAAE,QAAQ,CACnC,mBAAmB,EACnB,qBAAqB,EACrB,QAAQ,CAYT,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,EACtC,qBAAqB,EACrB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,EAClC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,EACnE,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAClB,eAAe,EACf,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAClB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC1C;IAAE,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,EACxB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAC3E;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC"}

package/dist/endpoints/admin-users.js

@@ -0,0 +1,60 @@
+import { parseApiError } from "../result.js";
+export const adminListUsers = {
+    method: "GET",
+    path: () => "/api/admin/users",
+    query: (input) => ({
+        status: input.status,
+        includeDeleted: input.includeDeleted ? "true" : undefined,
+        limit: input.limit,
+        offset: input.offset,
+    }),
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminSetUserStatus = {
+    method: "POST",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}/status`,
+    body: ({ status }) => ({ status }),
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminSetUserRole = {
+    method: "POST",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}/role`,
+    body: ({ role }) => ({ role }),
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+export const adminRevokeUserTokens = {
+    method: "POST",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}/revoke-tokens`,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminGetUser = {
+    method: "GET",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}`,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminDeleteUser = {
+    method: "DELETE",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}`,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+export const adminGetUserRoles = {
+    method: "GET",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}/roles`,
+    query: ({ organizationId }) => ({ organizationId }),
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const adminToggleUserRole = {
+    method: "POST",
+    path: ({ userId }) => `/api/admin/users/${encodeURIComponent(userId)}/roles`,
+    body: ({ organizationId, roleId, assign }) => ({ organizationId, roleId, assign }),
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+//# sourceMappingURL=admin-users.js.map

package/dist/endpoints/admin-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-users.js","sourceRoot":"","sources":["../../src/endpoints/admin-users.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAgB7C,MAAM,CAAC,MAAM,cAAc,GAIvB;IACF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB;IAC9B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACzD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IACF,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA6B;IACpD,UAAU,EAAE,aAAa;CAC1B,CAAC;AASF,MAAM,CAAC,MAAM,kBAAkB,GAI3B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,SAAS;IAC7E,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA6B;IACpD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAIzB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,OAAO;IAC3E,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,gBAAgB;IACpF,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,IAA2E;IAC7E,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAIrB;IACF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,EAAE;IACtE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAuB;IAC9C,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAIxB;IACF,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,EAAE;IACtE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAI1B;IACF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,QAAQ;IAC5E,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;IACnD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAgC;IACvD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAI5B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,QAAQ;IAC5E,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClF,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC"}

package/dist/endpoints/auth.d.ts

@@ -0,0 +1,93 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+import type { AuthSuccess } from "../types.js";
+/** Sign-up surfaces a couple of specific codes the UI may want to switch on. */
+export type SignUpError = ApiError | {
+    kind: "http";
+    status: 422;
+    code: "USER_ALREADY_EXISTS";
+    message: string;
+} | {
+    kind: "http";
+    status: 422;
+    code: "PASSWORD_TOO_SHORT";
+    message: string;
+};
+export declare const signUp: Endpoint<{
+    name: string;
+    email: string;
+    password: string;
+}, AuthSuccess, SignUpError>;
+/** Sign-in collapses bad-email / bad-password into one enumeration-safe code. */
+export type SignInError = ApiError | {
+    kind: "http";
+    status: 401;
+    code: "INVALID_EMAIL_OR_PASSWORD";
+    message: string;
+} | {
+    kind: "http";
+    status: 403;
+    code: "INACTIVE_USER";
+    message: string;
+};
+export declare const signIn: Endpoint<{
+    email: string;
+    password: string;
+}, AuthSuccess, SignInError>;
+export declare const signOut: Endpoint<void, {
+    success: boolean;
+}, ApiError>;
+export declare const requestPasswordReset: Endpoint<{
+    email: string;
+}, {
+    ok: true;
+}, ApiError>;
+export declare const resetPassword: Endpoint<{
+    token: string;
+    password: string;
+}, {
+    ok: true;
+}, ApiError>;
+export declare const requestMagicLink: Endpoint<{
+    email: string;
+}, {
+    ok: true;
+}, ApiError>;
+export declare const verifyMagicLink: Endpoint<{
+    token: string;
+}, {
+    ok: true;
+}, ApiError>;
+/**
+ * Better Auth admin-plugin user create. The rust server doesn't expose
+ * this route yet; the journey suite uses the endpoint to verify the
+ * absence + the permission check.
+ */
+export declare const adminCreateUser: Endpoint<{
+    email: string;
+    password: string;
+    name: string;
+    role?: string;
+}, {
+    user: {
+        id: string;
+        email: string;
+    };
+}, ApiError>;
+export declare const getProviders: Endpoint<void, {
+    providers: string[];
+}, ApiError>;
+export declare const socialSignIn: Endpoint<{
+    provider: string;
+    callbackURL?: string;
+}, {
+    url: string;
+    redirect: true;
+}, ApiError>;
+export declare const changePassword: Endpoint<{
+    currentPassword: string;
+    newPassword: string;
+}, {
+    ok: true;
+}, ApiError>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/endpoints/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/endpoints/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,gFAAgF;AAChF,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,eAAO,MAAM,MAAM,EAAE,QAAQ,CAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACjD,WAAW,EACX,WAAW,CAOZ,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,2BAA2B,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,eAAO,MAAM,MAAM,EAAE,QAAQ,CAC3B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACnC,WAAW,EACX,WAAW,CAOZ,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,EAAE,QAAQ,CAKlE,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EAAE,QAAQ,CAMpF,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACnC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EAAE,QAAQ,CAMhF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EAAE,QAAQ,CAM/E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAChE;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACvC,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK1E,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,EAC/B,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAAQ,CACnC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAChD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC"}

package/dist/endpoints/auth.js

@@ -0,0 +1,82 @@
+import { parseApiError } from "../result.js";
+export const signUp = {
+    method: "POST",
+    path: () => "/api/auth/sign-up/email",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const signIn = {
+    method: "POST",
+    path: () => "/api/auth/sign-in/email",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const signOut = {
+    method: "POST",
+    path: () => "/api/auth/sign-out",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const requestPasswordReset = {
+    method: "POST",
+    path: () => "/api/auth/forget-password",
+    body: (input) => input,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+export const resetPassword = {
+    method: "POST",
+    path: () => "/api/auth/reset-password",
+    body: (input) => input,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+export const requestMagicLink = {
+    method: "POST",
+    path: () => "/api/auth/sign-in/magic-link",
+    body: (input) => input,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+export const verifyMagicLink = {
+    method: "GET",
+    path: () => "/api/auth/magic-link/verify",
+    query: ({ token }) => ({ token }),
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+/**
+ * Better Auth admin-plugin user create. The rust server doesn't expose
+ * this route yet; the journey suite uses the endpoint to verify the
+ * absence + the permission check.
+ */
+export const adminCreateUser = {
+    method: "POST",
+    path: () => "/api/auth/admin/create-user",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const getProviders = {
+    method: "GET",
+    path: () => "/api/providers",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const socialSignIn = {
+    method: "POST",
+    path: () => "/api/auth/sign-in/social",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const changePassword = {
+    method: "POST",
+    path: () => "/api/auth/change-password",
+    body: (input) => input,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+//# sourceMappingURL=auth.js.map

package/dist/endpoints/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/endpoints/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAS7C,MAAM,CAAC,MAAM,MAAM,GAIf;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,yBAAyB;IACrC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAmB;IAC1C,UAAU,EAAE,aAAa;CAC1B,CAAC;AAQF,MAAM,CAAC,MAAM,MAAM,GAIf;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,yBAAyB;IACrC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAmB;IAC1C,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAmD;IACrE,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,oBAAoB;IAChC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA4B;IACnD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAwD;IACvF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,2BAA2B;IACvC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAItB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,0BAA0B;IACtC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAwD;IACnF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,8BAA8B;IAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAwD;IAClF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,6BAA6B;IACzC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACjC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAIxB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,6BAA6B;IACzC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA+C;IACtE,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAsD;IAC7E,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB;IAC5B,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA+B;IACtD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAIrB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,0BAA0B;IACtC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAuC;IAC9D,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAIvB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,2BAA2B;IACvC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC"}