@nokinc-flur/sdk 0.1.1 → 0.1.3

package/README.md

@@ -40,6 +40,43 @@ const completed = await client.onboardingComplete({
 // completed: { sessionToken, userId, restricted, risk_reasons }
 ```
 
+## Auth + device security methods
+
+```ts
+const registered = await client.registerDevice({
+	userId: completed.userId,
+	appInstanceId: "app-instance-1",
+	platform: "ios",
+	networkSignals: { ip: "1.2.3.4" },
+});
+// { deviceId, fingerprintHash, driftScore, trustState, stepUpRequired }
+
+const refreshed = await client.authRefresh({
+	userId: completed.userId,
+	refreshToken: completed.sessionToken,
+	appInstanceId: "app-instance-1",
+	fingerprintHash: registered.fingerprintHash,
+});
+// { refreshToken, stepUpRequired }
+
+await client.pinSet({ userId: completed.userId, pin: "123456" });
+await client.pinVerify({ userId: completed.userId, pin: "123456" });
+await client.authLogout({ userId: completed.userId, refreshToken: refreshed.refreshToken });
+```
+
+## Error code mapping
+
+SDK maps backend error payload `code` into typed `FlurError.code` when available:
+- `TOKEN_REPLAYED`
+- `SESSION_MISMATCH`
+- `PIN_INVALID`
+- `PIN_LOCKED`
+- `PIN_NOT_SET`
+- `STEP_UP_REQUIRED`
+
+Fallback codes remain:
+- `HTTP_ERROR`, `NETWORK_ERROR`, `TIMEOUT`, `UNKNOWN`
+
 ## Lean prod release workflow (one-person team)
 
 PowerShell script (Windows):

package/dist/index.d.ts

@@ -6,6 +6,8 @@ type FlurClientOptions = {
 type OnboardingFallback = "SILENT_AUTH" | "OTP";
 type OnboardingStartInput = {
     phoneE164: string;
+    firstName?: string;
+    lastName?: string;
 };
 type OnboardingStartResponse = {
     requestId: string;
@@ -17,12 +19,58 @@ type OnboardingRiskReason = "SIM_SWAP_RECENT" | "ROAMING" | "CARRIER_CHANGED";
 type OnboardingCompleteInput = {
     requestId: string;
     code: string;
+    appInstanceId?: string;
+    fingerprintHash?: string;
 };
 type OnboardingCompleteResponse = {
     sessionToken: string;
     userId: string;
     restricted: boolean;
     risk_reasons: OnboardingRiskReason[];
+    stepUpRequired?: boolean;
+    riskStatus?: "ok" | "unavailable";
+};
+type RegisterDeviceInput = {
+    userId: string;
+    appInstanceId: string;
+    platform: string;
+    model?: string;
+    networkSignals: {
+        ip: string;
+        asn?: number;
+        country?: string;
+        carrier?: string;
+    };
+};
+type DeviceTrustState = "TRUSTED_PRIMARY" | "TRUSTED_SECONDARY" | "UNVERIFIED";
+type RegisterDeviceResponse = {
+    deviceId: string;
+    fingerprintHash: string;
+    driftScore: number;
+    trustState: DeviceTrustState;
+    stepUpRequired: boolean;
+};
+type AuthRefreshInput = {
+    userId: string;
+    refreshToken: string;
+    appInstanceId: string;
+    fingerprintHash: string;
+};
+type AuthRefreshResponse = {
+    refreshToken: string;
+    stepUpRequired: boolean;
+};
+type AuthLogoutInput = {
+    userId: string;
+    refreshToken: string;
+};
+type PinSetInput = {
+    userId: string;
+    pin: string;
+};
+type PinVerifyInput = {
+    userId: string;
+    pin: string;
 };
 declare class FlurClient {
     private readonly baseUrl;
@@ -37,10 +85,21 @@ declare class FlurClient {
     }>;
     onboardingStart(input: OnboardingStartInput): Promise<OnboardingStartResponse>;
     onboardingComplete(input: OnboardingCompleteInput): Promise<OnboardingCompleteResponse>;
+    registerDevice(input: RegisterDeviceInput): Promise<RegisterDeviceResponse>;
+    authRefresh(input: AuthRefreshInput): Promise<AuthRefreshResponse>;
+    authLogout(input: AuthLogoutInput): Promise<{
+        ok: boolean;
+    }>;
+    pinSet(input: PinSetInput): Promise<{
+        ok: boolean;
+    }>;
+    pinVerify(input: PinVerifyInput): Promise<{
+        ok: boolean;
+    }>;
     private requestJson;
 }
 
-type FlurErrorCode = "NETWORK_ERROR" | "HTTP_ERROR" | "TIMEOUT" | "UNKNOWN";
+type FlurErrorCode = "NETWORK_ERROR" | "HTTP_ERROR" | "TIMEOUT" | "UNKNOWN" | "TOKEN_REPLAYED" | "SESSION_MISMATCH" | "PIN_INVALID" | "PIN_LOCKED" | "PIN_NOT_SET" | "STEP_UP_REQUIRED";
 declare class FlurError extends Error {
     readonly code: FlurErrorCode;
     readonly status?: number;
@@ -51,4 +110,4 @@ declare class FlurError extends Error {
     });
 }
 
-export { FlurClient, type FlurClientOptions, FlurError, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse };
+export { type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type DeviceTrustState, FlurClient, type FlurClientOptions, FlurError, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, type PinSetInput, type PinVerifyInput, type RegisterDeviceInput, type RegisterDeviceResponse };

package/dist/index.js

@@ -1,4 +1,12 @@
 // src/errors.ts
+var backendErrorCodeSet = /* @__PURE__ */ new Set([
+  "TOKEN_REPLAYED",
+  "SESSION_MISMATCH",
+  "PIN_INVALID",
+  "PIN_LOCKED",
+  "PIN_NOT_SET",
+  "STEP_UP_REQUIRED"
+]);
 var FlurError = class extends Error {
   code;
   status;
@@ -13,12 +21,27 @@ var FlurError = class extends Error {
 };
 async function mapToFlurError(res) {
   let details = void 0;
+  let mappedCode = "HTTP_ERROR";
+  let mappedMessage = `HTTP ${res.status}`;
   try {
     const ct = res.headers.get("content-type") ?? "";
     details = ct.includes("application/json") ? await res.json() : await res.text();
+    if (details && typeof details === "object") {
+      const candidateCode = details.code;
+      const candidateMessage = details.message;
+      const fallbackMessage = details.error;
+      if (typeof candidateCode === "string" && backendErrorCodeSet.has(candidateCode)) {
+        mappedCode = candidateCode;
+      }
+      if (typeof candidateMessage === "string" && candidateMessage.length > 0) {
+        mappedMessage = candidateMessage;
+      } else if (typeof fallbackMessage === "string" && fallbackMessage.length > 0) {
+        mappedMessage = fallbackMessage;
+      }
+    }
   } catch {
   }
-  return new FlurError(`HTTP ${res.status}`, "HTTP_ERROR", { status: res.status, details });
+  return new FlurError(mappedMessage, mappedCode, { status: res.status, details });
 }
 
 // src/client.ts
@@ -51,6 +74,41 @@ var FlurClient = class {
       body: JSON.stringify(input)
     });
   }
+  async registerDevice(input) {
+    return this.requestJson("/v1/devices/register", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(input)
+    });
+  }
+  async authRefresh(input) {
+    return this.requestJson("/v1/auth/refresh", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(input)
+    });
+  }
+  async authLogout(input) {
+    return this.requestJson("/v1/auth/logout", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(input)
+    });
+  }
+  async pinSet(input) {
+    return this.requestJson("/v1/auth/pin/set", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(input)
+    });
+  }
+  async pinVerify(input) {
+    return this.requestJson("/v1/auth/pin/verify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(input)
+    });
+  }
   async requestJson(path, init) {
     const url = `${this.baseUrl}${path}`;
     const controller = new AbortController();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nokinc-flur/sdk",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Flur Wallet SDK (sprint 1 scaffold)",
   "license": "MIT",
   "type": "module",