@noresponse/node 6.0.1 → 7.0.0

package/dist/commonjs/funcs/accounts-record-enforcement.js

@@ -0,0 +1,154 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accountsRecordEnforcement = accountsRecordEnforcement;
+const z = __importStar(require("zod/v4-mini"));
+const encodings_js_1 = require("../lib/encodings.js");
+const http_js_1 = require("../lib/http.js");
+const M = __importStar(require("../lib/matchers.js"));
+const primitives_js_1 = require("../lib/primitives.js");
+const schemas_js_1 = require("../lib/schemas.js");
+const security_js_1 = require("../lib/security.js");
+const url_js_1 = require("../lib/url.js");
+const errors = __importStar(require("../models/errors/index.js"));
+const operations = __importStar(require("../models/operations/index.js"));
+const async_js_1 = require("../types/async.js");
+/**
+ * Record what you did to an account in your identity provider.
+ *
+ * @remarks
+ * Records what you did to the account in your identity provider for one flow's decision at one risk_version: the action (or none), the account's state before it, the provider and whether it was applied or failed. It is your action, not an outcome, and it leaves the account's risk unchanged. A record is kept once per account, risk_version, flow and action: the first report answers 201, and a repeat answers 200 with the stored record unchanged, so retries are safe without an Idempotency-Key. An applied report after a failed one replaces the failed record, keeping its id and created_at, and answers 201. A risk_version older than the account's current one is accepted and stored, but only an applied record at the current risk_version takes the account out of listChanged with unenforced=true; a newer one answers 409 risk_version_ahead. An account with no current risk answers 404 not_found. error_code is allowed only with status failed. Requires the history scope.
+ */
+function accountsRecordEnforcement(client, request, options) {
+    return new async_js_1.APIPromise($do(client, request, options));
+}
+async function $do(client, request, options) {
+    const parsed = (0, schemas_js_1.safeParse)(request, (value) => z.parse(operations.RecordEnforcementRequest$outboundSchema, value), "Input validation failed");
+    if (!parsed.ok) {
+        return [parsed, { status: "invalid" }];
+    }
+    const payload = parsed.value;
+    const body = (0, encodings_js_1.encodeJSON)("body", payload.body, { explode: true });
+    const pathParams = {
+        account_id: (0, encodings_js_1.encodeSimple)("account_id", payload.account_id, {
+            explode: false,
+            charEncoding: "percent",
+        }),
+    };
+    const path = (0, url_js_1.pathToFunc)("/v1/accounts/{account_id}/enforcements")(pathParams);
+    const headers = new Headers((0, primitives_js_1.compactMap)({
+        "Content-Type": "application/json",
+        Accept: "application/json",
+    }));
+    const secConfig = await (0, security_js_1.extractSecurity)(client._options.apiKey);
+    const securityInput = secConfig == null ? {} : { apiKey: secConfig };
+    const requestSecurity = (0, security_js_1.resolveGlobalSecurity)(securityInput);
+    const context = {
+        options: client._options,
+        baseURL: options?.serverURL ?? client._baseURL ?? "",
+        operationID: "recordEnforcement",
+        oAuth2Scopes: null,
+        resolvedSecurity: requestSecurity,
+        securitySource: client._options.apiKey,
+        retryConfig: options?.retries
+            || client._options.retryConfig
+            || {
+                strategy: "backoff",
+                backoff: {
+                    initialInterval: 500,
+                    maxInterval: 8000,
+                    exponent: 2,
+                    maxElapsedTime: 30000,
+                },
+                retryConnectionErrors: true,
+            }
+            || { strategy: "none" },
+        retryCodes: options?.retryCodes || ["408", "429", "5XX"],
+    };
+    const requestRes = client._createRequest(context, {
+        security: requestSecurity,
+        method: "POST",
+        baseURL: options?.serverURL,
+        path: path,
+        headers: headers,
+        body: body,
+        userAgent: client._options.userAgent,
+        timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+    }, options);
+    if (!requestRes.ok) {
+        return [requestRes, { status: "invalid" }];
+    }
+    const req = requestRes.value;
+    const doResult = await client._do(req, {
+        context,
+        isErrorStatusCode: (statusCode) => (0, http_js_1.matchStatusCode)({ status: statusCode }, ["4XX", "5XX"]),
+        retryConfig: context.retryConfig,
+        retryCodes: context.retryCodes,
+    });
+    if (!doResult.ok) {
+        return [doResult, { status: "request-error", request: req }];
+    }
+    const response = doResult.value;
+    const responseFields = {
+        HttpMeta: { Response: response, Request: req },
+    };
+    const [result] = await M.match(M.json([200, 201], operations.RecordEnforcementResponse$inboundSchema, {
+        hdrs: true,
+        key: "Result",
+    }), M.jsonErr(400, errors.BadRequestError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.jsonErr(401, errors.AuthenticationError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.jsonErr(403, errors.PermissionDeniedError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.jsonErr(404, errors.NotFoundError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.jsonErr(409, errors.ConflictError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.jsonErr(429, errors.RateLimitError$inboundSchema, {
+        ctype: "application/problem+json",
+        hdrs: true,
+    }), M.fail("4XX"), M.fail("5XX"))(response, req, { extraFields: responseFields });
+    if (!result.ok) {
+        return [result, { status: "complete", request: req, response }];
+    }
+    return [result, { status: "complete", request: req, response }];
+}
+//# sourceMappingURL=accounts-record-enforcement.js.map

package/dist/commonjs/funcs/accounts-record-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-record-enforcement.js","sourceRoot":"","sources":["../../../src/funcs/accounts-record-enforcement.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AAEjC,sDAA+D;AAC/D,4CAAiD;AACjD,MAAY,CAAC,+CAA2B;AACxC,wDAAkD;AAClD,kDAA8C;AAE9C,oDAA4E;AAC5E,0CAA2C;AAQ3C,MAAY,MAAM,sDAAkC;AAIpD,MAAY,UAAU,0DAAsC;AAC5D,gDAAwD;AAGxD;;;;;GAKG;AACH,mCACE,MAAsB,EACtB,OAA4C,EAC5C,OAAwB,EAmBxB;IACA,OAAO,IAAI,qBAAU,CAAC,GAAG,CACvB,MAAM,EACN,OAAO,EACP,OAAO,CACR,CAAC,CAAC;AAAA,CACJ;AAED,KAAK,UAAU,GAAG,CAChB,MAAsB,EACtB,OAA4C,EAC5C,OAAwB,EAsBxB;IACA,MAAM,MAAM,GAAG,IAAA,sBAAS,EACtB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,uCAAuC,EAAE,KAAK,CAAC,EACpE,yBAAyB,CAC1B,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAA,yBAAU,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,IAAA,2BAAY,EAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE;YACzD,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,SAAS;SACxB,CAAC;KACH,CAAC;IACF,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,wCAAwC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAA,0BAAU,EAAC;QACrC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,eAAe,GAAG,IAAA,mCAAqB,EAAC,aAAa,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,MAAM,CAAC,QAAQ;QACxB,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;QACpD,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,IAAI;QAElB,gBAAgB,EAAE,eAAe;QAEjC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACtC,WAAW,EAAE,OAAO,EAAE,OAAO;eACxB,MAAM,CAAC,QAAQ,CAAC,WAAW;eAC3B;gBACD,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE;oBACP,eAAe,EAAE,GAAG;oBACpB,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,CAAC;oBACX,cAAc,EAAE,KAAK;iBACtB;gBACD,qBAAqB,EAAE,IAAI;aAC5B;eACE,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KACzD,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;QAChD,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAO,EAAE,SAAS;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;QACpC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;KACjE,EAAE,OAAO,CAAC,CAAC;IACZ,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC;IAE7B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;QACrC,OAAO;QACP,iBAAiB,EAAE,CAAC,UAAkB,EAAE,EAAE,CACxC,IAAA,yBAAe,EAAC,EAAE,MAAM,EAAE,UAAU,EAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IAEhC,MAAM,cAAc,GAAG;QACrB,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;KAC/C,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAiB5B,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,uCAAuC,EAAE;QACrE,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,QAAQ;KACd,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,6BAA6B,EAAE;QACnD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,iCAAiC,EAAE;QACvD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,mCAAmC,EAAE;QACzD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,2BAA2B,EAAE;QACjD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,2BAA2B,EAAE;QACjD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,4BAA4B,EAAE;QAClD,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,IAAI;KACX,CAAC,EACF,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EACb,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CACd,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;AAAA,CACjE"}

package/dist/commonjs/index.d.ts

@@ -5,7 +5,7 @@
 export { NoResponse, Assessments, Accounts, Keys, KeyUsage, WebhookEndpoints, Integrations, DEFAULT_BASE_URL, DEFAULT_TIMEOUT_MS, type NoResponseOptions, type CreateOptions, type GetOptions, type ListAssessmentsOptions, type AssessmentPage, type ListDeliveriesOptions, type DeliveryPage, type ResponseMeta, type WithMeta, type WaitOptions, } from "./client.js";
 export * from "./errors.js";
 export { constructEvent, WebhookVerificationError, DEFAULT_TOLERANCE_SECONDS, type ConstructEventOptions, type HeaderInput, type WebhookSecrets, type WebhookErrorCode, } from "./webhooks.js";
-export { handleLateResult, lateResultAction, clerkActions, workosActions, auth0Actions, logOnlyActions, ProviderActionError, DEFAULT_LATE_RESULT_POLICY, type LateResult, type LateResultAction, type LateResultOptions, type LateResultPolicy, type LateResultActor, type LateResultProvider, type ClerkActionsOptions, type WorkOSActionsOptions, type Auth0ActionsOptions, type LogOnlyActionsOptions, } from "./late-results.js";
+export { handleRiskChange, enforceAccount, identityProvider, customProvider, ProviderActionError, type AccountState, type AccountStateAnswer, type Enforced, type EnforcementOptions, type ActionProvider, type EnforcementResult, type EnforcementSkip, type FlowPolicy, type IdentityProviderOptions, type ProviderAction, } from "./late-results.js";
 export { fromAuth0, fromClerk, fromCognito, fromEntra, fromFirebase, fromKeycloak, fromOIDC, fromOry, fromOryOAuth2, fromSupabase, fromWorkOS, type VerifiedClaims, type AuthContextOverrides, } from "./auth.js";
 export { DEFAULT_WAIT_TIMEOUT_MS, MIN_POLL_INTERVAL_MS } from "./wait.js";
 export { hashIssuedCredential } from "./issued-credential.js";

package/dist/commonjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/commonjs/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NoResponseCore = exports.HTTPClient = exports.ServerList = exports.SDK_METADATA = exports.DEFAULT_MAX_QUEUE = exports.DEFAULT_FLUSH_INTERVAL_MS = exports.DEFAULT_BATCH_SIZE = exports.MAX_BATCH_BYTES = exports.MAX_BATCH_EVENTS = exports.KeyUsageBuffer = exports.hashIssuedCredential = exports.MIN_POLL_INTERVAL_MS = exports.DEFAULT_WAIT_TIMEOUT_MS = exports.fromWorkOS = exports.fromSupabase = exports.fromOryOAuth2 = exports.fromOry = exports.fromOIDC = exports.fromKeycloak = exports.fromFirebase = exports.fromEntra = exports.fromCognito = exports.fromClerk = exports.fromAuth0 = exports.DEFAULT_LATE_RESULT_POLICY = exports.ProviderActionError = exports.logOnlyActions = exports.auth0Actions = exports.workosActions = exports.clerkActions = exports.lateResultAction = exports.handleLateResult = exports.DEFAULT_TOLERANCE_SECONDS = exports.WebhookVerificationError = exports.constructEvent = exports.DEFAULT_TIMEOUT_MS = exports.DEFAULT_BASE_URL = exports.Integrations = exports.WebhookEndpoints = exports.KeyUsage = exports.Keys = exports.Accounts = exports.Assessments = exports.NoResponse = void 0;
+exports.NoResponseCore = exports.HTTPClient = exports.ServerList = exports.SDK_METADATA = exports.DEFAULT_MAX_QUEUE = exports.DEFAULT_FLUSH_INTERVAL_MS = exports.DEFAULT_BATCH_SIZE = exports.MAX_BATCH_BYTES = exports.MAX_BATCH_EVENTS = exports.KeyUsageBuffer = exports.hashIssuedCredential = exports.MIN_POLL_INTERVAL_MS = exports.DEFAULT_WAIT_TIMEOUT_MS = exports.fromWorkOS = exports.fromSupabase = exports.fromOryOAuth2 = exports.fromOry = exports.fromOIDC = exports.fromKeycloak = exports.fromFirebase = exports.fromEntra = exports.fromCognito = exports.fromClerk = exports.fromAuth0 = exports.ProviderActionError = exports.customProvider = exports.identityProvider = exports.enforceAccount = exports.handleRiskChange = exports.DEFAULT_TOLERANCE_SECONDS = exports.WebhookVerificationError = exports.constructEvent = exports.DEFAULT_TIMEOUT_MS = exports.DEFAULT_BASE_URL = exports.Integrations = exports.WebhookEndpoints = exports.KeyUsage = exports.Keys = exports.Accounts = exports.Assessments = exports.NoResponse = void 0;
 /**
  * @noresponse/node entry point. Hand-written (listed in .genignore); the
  * generated client lives under ./sdk, ./funcs, ./models and ./lib.
@@ -35,14 +35,11 @@ Object.defineProperty(exports, "constructEvent", { enumerable: true, get: functi
 Object.defineProperty(exports, "WebhookVerificationError", { enumerable: true, get: function () { return webhooks_js_1.WebhookVerificationError; } });
 Object.defineProperty(exports, "DEFAULT_TOLERANCE_SECONDS", { enumerable: true, get: function () { return webhooks_js_1.DEFAULT_TOLERANCE_SECONDS; } });
 const late_results_js_1 = require("./late-results.js");
-Object.defineProperty(exports, "handleLateResult", { enumerable: true, get: function () { return late_results_js_1.handleLateResult; } });
-Object.defineProperty(exports, "lateResultAction", { enumerable: true, get: function () { return late_results_js_1.lateResultAction; } });
-Object.defineProperty(exports, "clerkActions", { enumerable: true, get: function () { return late_results_js_1.clerkActions; } });
-Object.defineProperty(exports, "workosActions", { enumerable: true, get: function () { return late_results_js_1.workosActions; } });
-Object.defineProperty(exports, "auth0Actions", { enumerable: true, get: function () { return late_results_js_1.auth0Actions; } });
-Object.defineProperty(exports, "logOnlyActions", { enumerable: true, get: function () { return late_results_js_1.logOnlyActions; } });
+Object.defineProperty(exports, "handleRiskChange", { enumerable: true, get: function () { return late_results_js_1.handleRiskChange; } });
+Object.defineProperty(exports, "enforceAccount", { enumerable: true, get: function () { return late_results_js_1.enforceAccount; } });
+Object.defineProperty(exports, "identityProvider", { enumerable: true, get: function () { return late_results_js_1.identityProvider; } });
+Object.defineProperty(exports, "customProvider", { enumerable: true, get: function () { return late_results_js_1.customProvider; } });
 Object.defineProperty(exports, "ProviderActionError", { enumerable: true, get: function () { return late_results_js_1.ProviderActionError; } });
-Object.defineProperty(exports, "DEFAULT_LATE_RESULT_POLICY", { enumerable: true, get: function () { return late_results_js_1.DEFAULT_LATE_RESULT_POLICY; } });
 const auth_js_1 = require("./auth.js");
 Object.defineProperty(exports, "fromAuth0", { enumerable: true, get: function () { return auth_js_1.fromAuth0; } });
 Object.defineProperty(exports, "fromClerk", { enumerable: true, get: function () { return auth_js_1.fromClerk; } });

package/dist/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,2CAoBqB;AAnBnB,uGAAA,UAAU,OAAA;AACV,wGAAA,WAAW,OAAA;AACX,qGAAA,QAAQ,OAAA;AACR,iGAAA,IAAI,OAAA;AACJ,qGAAA,QAAQ,OAAA;AACR,6GAAA,gBAAgB,OAAA;AAChB,yGAAA,YAAY,OAAA;AACZ,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AAYpB,8CAA4B;AAC5B,+CAQuB;AAPrB,6GAAA,cAAc,OAAA;AACd,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAM3B,uDAmB2B;AAlBzB,mHAAA,gBAAgB,OAAA;AAChB,mHAAA,gBAAgB,OAAA;AAChB,+GAAA,YAAY,OAAA;AACZ,gHAAA,aAAa,OAAA;AACb,+GAAA,YAAY,OAAA;AACZ,iHAAA,cAAc,OAAA;AACd,sHAAA,mBAAmB,OAAA;AACnB,6HAAA,0BAA0B,OAAA;AAY5B,uCAcmB;AAbjB,oGAAA,SAAS,OAAA;AACT,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AACX,oGAAA,SAAS,OAAA;AACT,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AACZ,mGAAA,QAAQ,OAAA;AACR,kGAAA,OAAO,OAAA;AACP,wGAAA,aAAa,OAAA;AACb,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAIZ,uCAA0E;AAAjE,kHAAA,uBAAuB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AACtD,iEAA8D;AAArD,4HAAA,oBAAoB,OAAA;AAC7B,iDAWwB;AAVtB,8GAAA,cAAc,OAAA;AACd,gHAAA,gBAAgB,OAAA;AAChB,+GAAA,eAAe,OAAA;AACf,kHAAA,kBAAkB,OAAA;AAClB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AAMnB,oDAAkC;AAWlC,+CAA4E;AAAnE,yGAAA,YAAY,OAAA;AAAE,uGAAA,UAAU,OAAA;AACjC,2CAAiF;AAAxE,qGAAA,UAAU,OAAA;AAInB,uCAA2C;AAAlC,yGAAA,cAAc,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,2CAoBqB;AAnBnB,uGAAA,UAAU,OAAA;AACV,wGAAA,WAAW,OAAA;AACX,qGAAA,QAAQ,OAAA;AACR,iGAAA,IAAI,OAAA;AACJ,qGAAA,QAAQ,OAAA;AACR,6GAAA,gBAAgB,OAAA;AAChB,yGAAA,YAAY,OAAA;AACZ,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AAYpB,8CAA4B;AAC5B,+CAQuB;AAPrB,6GAAA,cAAc,OAAA;AACd,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAM3B,uDAgB2B;AAfzB,mHAAA,gBAAgB,OAAA;AAChB,iHAAA,cAAc,OAAA;AACd,mHAAA,gBAAgB,OAAA;AAChB,iHAAA,cAAc,OAAA;AACd,sHAAA,mBAAmB,OAAA;AAYrB,uCAcmB;AAbjB,oGAAA,SAAS,OAAA;AACT,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AACX,oGAAA,SAAS,OAAA;AACT,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AACZ,mGAAA,QAAQ,OAAA;AACR,kGAAA,OAAO,OAAA;AACP,wGAAA,aAAa,OAAA;AACb,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAIZ,uCAA0E;AAAjE,kHAAA,uBAAuB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AACtD,iEAA8D;AAArD,4HAAA,oBAAoB,OAAA;AAC7B,iDAWwB;AAVtB,8GAAA,cAAc,OAAA;AACd,gHAAA,gBAAgB,OAAA;AAChB,+GAAA,eAAe,OAAA;AACf,kHAAA,kBAAkB,OAAA;AAClB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AAMnB,oDAAkC;AAWlC,+CAA4E;AAAnE,yGAAA,YAAY,OAAA;AAAE,uGAAA,UAAU,OAAA;AACjC,2CAAiF;AAAxE,qGAAA,UAAU,OAAA;AAInB,uCAA2C;AAAlC,yGAAA,cAAc,OAAA"}

package/dist/commonjs/late-results.d.ts

@@ -1,161 +1,107 @@
+/**
+ * Late enforcement. Generated by tools/generate_overlays.py from
+ * tools/late_results/actions.json; do not edit.
+ *
+ * account.risk_changed only wakes the handler. handleRiskChange verifies the
+ * delivery, reads the account's current risk (GET /v1/accounts/{account_id}),
+ * asks your getAccountState where the account is in your own flow, and takes
+ * the actions the table names for that state and the decision of its flow:
+ *
+ *   onboarding   account_creation review/block  fail_onboarding, revoke_sessions
+ *   provisional  account_creation review/block  reject_activation, revoke_sessions
+ *   active       login review                   revoke_sessions
+ *   active       login block                    restrict, revoke_sessions
+ *   restricted   login allow                    unrestrict, when flows.login.reinstate
+ *
+ * Every action, or none, is recorded with accounts.recordEnforcement at the
+ * riskVersion read, and a refused action is recorded as failed and thrown.
+ * No action deletes a user. The same table and vectors
+ * (tests/fixtures/late-results-vectors.json) run in every SDK.
+ */
+import type { NoResponse } from "./client.js";
+import type { Account } from "./models/account.js";
 import type { WebhookEvent } from "./models/webhook-event.js";
 import { type ConstructEventOptions, type HeaderInput, type WebhookSecrets } from "./webhooks.js";
-/** What to do to the user. "ban" also ends every session. */
-export type LateResultAction = "none" | "revoke_sessions" | "ban";
-/** The action for each account decision (account.risk.decision). A decision you leave out does nothing. */
-export type LateResultPolicy = Readonly<Partial<Record<"allow" | "step_up" | "review" | "block", LateResultAction>>>;
-/** Revoke sessions on review and block; do nothing on allow or step_up. Banning is opt-in. */
-export declare const DEFAULT_LATE_RESULT_POLICY: LateResultPolicy;
-/** The two admin actions, for one auth provider. Build one with clerkActions, workosActions or auth0Actions. */
-export interface LateResultProvider {
-    readonly name: string;
-    /** End every active session of the user. */
-    revokeSessions(userId: string): Promise<void>;
-    /** Stop the user signing in again and end their sessions. */
-    ban(userId: string): Promise<void>;
-    /**
-     * Optional. Take `action` and return the action that ran. A provider that
-     * has to do more than it was asked implements this: auth0Actions answers
-     * "ban" when the tenant's plan has no sessions API and it blocked the user
-     * to end their sessions. When absent, handleLateResult calls ban or
-     * revokeSessions and reports the action asked for.
-     */
-    act?(action: "revoke_sessions" | "ban", userId: string): Promise<LateResultAction>;
-}
-/** A provider that reports the action that ran, as auth0Actions does. */
-export interface LateResultActor extends LateResultProvider {
-    act(action: "revoke_sessions" | "ban", userId: string): Promise<LateResultAction>;
+type Flow = "account_creation" | "login" | "purchase";
+export type AccountState = "onboarding" | "provisional" | "active" | "restricted" | "rejected";
+type EnforcementAction = "revoke_sessions" | "restrict" | "unrestrict" | "fail_onboarding" | "reject_activation" | "none";
+/** An action a provider runs: every EnforcementAction but none. */
+export type ProviderAction = Exclude<EnforcementAction, "none">;
+/** Where the account is in your flow, from getAccountState. */
+export type AccountStateAnswer = {
+    state: AccountState;
+    /** The provider's user id. Defaults to the account id, as when you assess with the provider's user id. */
+    userId?: string;
+    /** The riskVersion you last enforced (a result's riskVersion that you stored). An account at or below it is skipped. */
+    enforcedRiskVersion?: number;
+};
+/** Runs one action in an identity provider. Build one with identityProvider or customProvider. */
+export interface ActionProvider {
+    readonly name: "clerk" | "workos" | "auth0" | "custom";
+    /** Take the action and return any other action that had to run with it (Auth0 restricts to end a session). */
+    run(action: ProviderAction, userId: string): Promise<ProviderAction[]>;
 }
-export type LateResultOptions = ConstructEventOptions & {
-    /** Account decision to action. Defaults to DEFAULT_LATE_RESULT_POLICY. */
-    policy?: LateResultPolicy;
-    /**
-     * The provider user id for the assessment's detail.account_id. Defaults to the
-     * account_id itself, as when you assess with the provider's user id.
-     * Return null or undefined to take no action.
-     */
-    userId?: (accountId: string, event: WebhookEvent) => string | null | undefined | Promise<string | null | undefined>;
+export type FlowPolicy = {
+    /** Lift a restriction once the flow's decision is allow again. Off by default. */
+    reinstate?: boolean;
 };
-export type LateResult = {
-    /** The verified event. Answer an endpoint.verification with a WebhookVerificationResponse echoing its challenge. */
-    event: WebhookEvent;
-    /**
-     * The action that ran. "none" when the policy, the event or the user id
-     * called for nothing. It can be stronger than the policy's action when the
-     * provider had to fall back: auth0Actions reports "ban" when it blocked the
-     * user because the tenant's plan cannot end sessions.
-     */
-    action: LateResultAction;
-    /** The provider user id acted on, when an action was taken. */
-    userId?: string;
+export type EnforcementOptions = ConstructEventOptions & {
+    provider: ActionProvider;
+    /** The account's state in your flow; null or undefined for an account you do not hold. */
+    getAccountState: (account: Account) => AccountStateAnswer | null | undefined | Promise<AccountStateAnswer | null | undefined>;
+    flows?: Partial<Record<Flow, FlowPolicy>>;
 };
-/**
- * Thrown when the provider's admin API refuses a call. Answer the webhook with a 5xx so NoResponse retries it.
- * A 404 is never thrown: the user or session is already gone, so the action is done.
- */
+/** Why nothing was done: not account.risk_changed (or a test event), the account was erased, getAccountState knows no such account, or its riskVersion is already enforced. */
+export type EnforcementSkip = "not_actionable" | "account_gone" | "unknown_user" | "already_enforced";
+export type Enforced = {
+    flow: Flow;
+    action: EnforcementAction;
+    status: "applied" | "failed";
+    errorCode?: string;
+};
+export type EnforcementResult = {
+    /** The verified event, from handleRiskChange. Answer an endpoint.verification with its challenge. */
+    event?: WebhookEvent;
+    account?: Account;
+    state?: AccountState;
+    /** The riskVersion acted on. Store it and return it as enforcedRiskVersion. */
+    riskVersion?: number;
+    skipped?: EnforcementSkip;
+    /** What was recorded, in order. */
+    enforcements: Enforced[];
+};
+/** The provider refused an action or could not be reached (status 0). Answer the webhook with a 5xx so it is delivered again. */
 export declare class ProviderActionError extends Error {
     readonly provider: string;
     readonly status: number;
-    /** The provider's error code from the response body, such as Auth0's errorCode "insufficient_scope", when it sent one. */
+    /** The provider's error code, such as Auth0's errorCode "insufficient_scope", when it sent one. */
     readonly code: string | undefined;
     constructor(provider: string, status: number, message: string, code?: string);
 }
 /**
- * The action your policy names for a verified event's account.risk.decision. Only a complete or partial
- * assessment whose account has a decision can act; a pending one and a test event from
- * webhookEndpoints.sendTestEvent never do.
+ * Verify an account.risk_changed delivery and enforce the account's current
+ * risk. A delivery that fails verification throws WebhookVerificationError
+ * before anything is read; any other event, and a test event, does nothing.
  */
-export declare function lateResultAction(event: WebhookEvent, policy?: LateResultPolicy): LateResultAction;
+export declare function handleRiskChange(client: NoResponse, payload: Uint8Array | string, headers: HeaderInput, secrets: WebhookSecrets, options: EnforcementOptions): Promise<EnforcementResult>;
 /**
- * Verify a webhook delivery and apply your policy to it.
- *
- * `payload`, `headers`, `secrets` and the tolerance options are exactly what
- * constructEvent takes; a delivery that fails verification throws
- * WebhookVerificationError before any provider call. A test event acts on
- * nothing. Revoke and ban are safe to repeat, but deduplicate on
- * `result.event.id` and ignore versions older than one you have acted on.
+ * Enforce one account as read: the account a handler fetched, or one from
+ * accounts.listChanged({ unenforced: true }) when catching up.
  */
-export declare function handleLateResult(payload: Uint8Array | string, headers: HeaderInput, secrets: WebhookSecrets, provider: LateResultProvider, options?: LateResultOptions): Promise<LateResult>;
+export declare function enforceAccount(client: NoResponse, account: Account, options: EnforcementOptions): Promise<EnforcementResult>;
 type Fetch = typeof fetch;
-export type ClerkActionsOptions = {
-    /** Clerk secret key (sk_...). */
-    secretKey: string;
-    /** Default https://api.clerk.com/v1. */
-    baseUrl?: string;
-    fetch?: Fetch;
-};
-/**
- * Clerk Backend API. revokeSessions lists the user's active sessions
- * (GET /sessions?user_id&status=active) and revokes each
- * (POST /sessions/{id}/revoke). ban is POST /users/{id}/ban, which revokes
- * every session and blocks sign-in.
- */
-export declare function clerkActions(options: ClerkActionsOptions): LateResultProvider;
-export type WorkOSActionsOptions = {
-    /** WorkOS API key (sk_...). */
-    apiKey: string;
-    /** Default https://api.workos.com. */
-    baseUrl?: string;
-    fetch?: Fetch;
-};
-/**
- * WorkOS User Management. revokeSessions pages through
- * GET /user_management/users/{id}/sessions and revokes each active one with
- * POST /user_management/sessions/revoke. WorkOS has no block or ban, so ban
- * revokes the sessions and then deletes the user
- * (DELETE /user_management/users/{id}); deletion is permanent.
- */
-export declare function workosActions(options: WorkOSActionsOptions): LateResultProvider;
-export type Auth0ActionsOptions = {
-    /** Your Auth0 tenant domain, such as example.eu.auth0.com. The Management API is https://{domain}/api/v2. */
+export type IdentityProviderOptions = {
+    /** Clerk secret key, WorkOS API key or Auth0 Management API token. */
+    token: string;
+    /** Auth0 tenant domain, such as example.eu.auth0.com. */
     domain?: string;
-    /** The Management API base URL in place of domain. */
+    /** The admin API's base URL, in place of the table's (or of domain). */
     baseUrl?: string;
-    /**
-     * A Management API access token with update:users, delete:sessions,
-     * delete:refresh_tokens, read:device_credentials and delete:device_credentials.
-     */
-    token: string;
     fetch?: Fetch;
 };
-/**
- * Auth0 Management API.
- *
- * revokeSessions deletes every session (DELETE /users/{id}/sessions) and
- * every refresh token (DELETE /users/{id}/refresh-tokens). ban first sets
- * blocked: true (PATCH /users/{id}), then does the same.
- *
- * Auth0 offers the sessions and refresh-token endpoints on Enterprise plans
- * only; on other plans they answer 403 feature_not_enabled. Then:
- * - refresh tokens are deleted one by one through
- *   /device-credentials (types refresh_token and rotating_refresh_token),
- *   which every plan has;
- * - a login session cannot be ended, so revokeSessions blocks the user
- *   (PATCH blocked: true) before deleting the refresh tokens, and act
- *   reports "ban". Unblock the user in the dashboard to undo it.
- * Any other refusal, such as 403 insufficient_scope, throws.
- *
- * A 429 from the Management API is waited out and retried: Retry-After, else
- * X-RateLimit-Reset, else 250 ms doubling, at most 4 retries a call and 3 s of
- * waiting a revoke or ban. Past that the 429 throws as ProviderActionError.
- */
-export declare function auth0Actions(options: Auth0ActionsOptions): LateResultActor;
-export type LogOnlyActionsOptions = {
-    /**
-     * Receives one line per action the handler would take, with the action and
-     * the user id. Defaults to console.info.
-     */
-    log?: (message: string, details: {
-        action: Exclude<LateResultAction, "none">;
-        userId: string;
-    }) => void;
-};
-/**
- * A provider for an app with its own login, or for trying the handler before
- * you wire up a real one. revokeSessions and ban each log what they would do
- * and call nothing: no request leaves your process. Replace it with your own
- * LateResultProvider once you know what revoking and banning mean in your app.
- */
-export declare function logOnlyActions(options?: LogOnlyActionsOptions): LateResultProvider;
+/** Clerk, WorkOS or Auth0, run from the shared action table. */
+export declare function identityProvider(name: "clerk" | "workos" | "auth0", options: IdentityProviderOptions): ActionProvider;
+/** Your own user store: one function per action you support. An action without one fails. */
+export declare function customProvider(handlers: Partial<Record<ProviderAction, (userId: string) => Promise<void | ProviderAction[]>>>): ActionProvider;
 export {};
 //# sourceMappingURL=late-results.d.ts.map

package/dist/commonjs/late-results.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"late-results.d.ts","sourceRoot":"","sources":["../../src/late-results.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAElH,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,iBAAiB,GAAG,KAAK,CAAC;AAElE,2GAA2G;AAC3G,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAErH,8FAA8F;AAC9F,eAAO,MAAM,0BAA0B,EAAE,gBAKvC,CAAC;AAEH,gHAAgH;AAChH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,6DAA6D;IAC7D,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpF;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG;IACtD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACrH,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,oHAAoH;IACpH,KAAK,EAAE,YAAY,CAAC;IACpB;;;;;OAKG;IACH,MAAM,EAAE,gBAAgB,CAAC;IACzB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0HAA0H;IAC1H,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,YAAY,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAM3E;CACF;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,GAAE,gBAA6C,GAAG,gBAAgB,CAqB7H;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,UAAU,GAAG,MAAM,EAC5B,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,KAAK,KAAK,GAAG,OAAO,KAAK,CAAC;AA6F1B,MAAM,MAAM,mBAAmB,GAAG;IAChC,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CAsB7E;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,kBAAkB,CA0B/E;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,6GAA6G;IAC7G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAKF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,eAAe,CAoE1E;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACzG,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,qBAA0B,GAAG,kBAAkB,CAatF"}
+{"version":3,"file":"late-results.d.ts","sourceRoot":"","sources":["../../src/late-results.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAElH,KAAK,IAAI,GAAG,kBAAkB,GAAG,OAAO,GAAG,UAAU,CAAC;AACtD,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;AAC/F,KAAK,iBAAiB,GAAG,iBAAiB,GAAG,UAAU,GAAG,YAAY,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,MAAM,CAAC;AAC1H,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAqBhE,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wHAAwH;IACxH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,kGAAkG;AAClG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvD,8GAA8G;IAC9G,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CACxE;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,GAAG;IACvD,QAAQ,EAAE,cAAc,CAAC;IACzB,0FAA0F;IAC1F,eAAe,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC9H,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;CAC3C,CAAC;AAEF,+KAA+K;AAC/K,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEtG,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,qGAAqG;IACrG,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,mCAAmC;IACnC,YAAY,EAAE,QAAQ,EAAE,CAAC;CAC1B,CAAC;AAEF,iIAAiI;AACjI,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mGAAmG;IACnG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,YAAY,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAM3E;CACF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,UAAU,GAAG,MAAM,EAC5B,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAID;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyClI;AAcD,KAAK,KAAK,GAAG,OAAO,KAAK,CAAC;AAE1B,MAAM,MAAM,uBAAuB,GAAG;IACpC,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,cAAc,CAmBrH;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,cAAc,CAW9I"}