@north-light/sdk 0.3.621 → 0.3.623

package/dist/oauth/index.d.ts

@@ -170,12 +170,14 @@ export declare class OAuth2Client {
         returnTo?: string;
     }): Promise<string>;
     /** Start a sign-in. When `scopes` includes `openid` the result carries the `nonce` to pass to the exchange; with literal scopes its type is `string`.
-     * `prompt: 'consent'` makes the directory show its consent screen even when the person already approved these scopes. */
-    authorizeUrl<const S extends readonly string[]>({ scopes, state, codeVerifier, prompt }: {
+     * `prompt: 'consent'` makes the directory show its consent screen even when the person already approved these scopes.
+     * `loginHint` is a phone number the app already collected (any format a person types; US or Canadian numbers can be texted): a signed-out person's sign-in page then shows it with one "Text me a link" button instead of asking for it. A number the directory cannot text only prefills its form. */
+    authorizeUrl<const S extends readonly string[]>({ scopes, state, codeVerifier, prompt, loginHint }: {
         scopes: S;
         state: string;
         codeVerifier?: string;
         prompt?: 'consent';
+        loginHint?: string;
     }): Promise<{
         url: string;
         codeVerifier: string;

package/dist/oauth/index.js

@@ -228,8 +228,9 @@ export class OAuth2Client {
         return url.toString();
     }
     /** Start a sign-in. When `scopes` includes `openid` the result carries the `nonce` to pass to the exchange; with literal scopes its type is `string`.
-     * `prompt: 'consent'` makes the directory show its consent screen even when the person already approved these scopes. */
-    async authorizeUrl({ scopes, state, codeVerifier, prompt }) {
+     * `prompt: 'consent'` makes the directory show its consent screen even when the person already approved these scopes.
+     * `loginHint` is a phone number the app already collected (any format a person types; US or Canadian numbers can be texted): a signed-out person's sign-in page then shows it with one "Text me a link" button instead of asking for it. A number the directory cannot text only prefills its form. */
+    async authorizeUrl({ scopes, state, codeVerifier, prompt, loginHint }) {
         for (const scope of scopes) {
             if (scope === 'openid' || scope === 'email' || scope === 'profile')
                 continue;
@@ -249,6 +250,7 @@ export class OAuth2Client {
             client_id: this.options.clientId, response_type: 'code', redirect_uri: this.options.redirectUri,
             scope: scopes.join(' '), state, code_challenge: challenge, code_challenge_method: 'S256',
             ...(nonce ? { nonce } : {}), ...(prompt === undefined ? {} : { prompt }),
+            ...(loginHint === undefined ? {} : { login_hint: loginHint }),
         }).toString();
         return { url: url.href, codeVerifier: verifier, state, ...(nonce ? { nonce } : {}) };
     }

package/dist/skill/northlight/SKILL.md

@@ -2,7 +2,7 @@
 name: northlight
 description: "Use when building, debugging or shipping an app that signs people in with Northlight, starts runs on their Northlight runtime, or calls Northlight providers (sms, search, integrations, context, device) with @north-light/sdk."
 metadata:
-  sdk-version: "0.3.621"
+  sdk-version: "0.3.623"
 ---
 
 # Building a Northlight app
@@ -27,7 +27,7 @@ Never text a person first: Comms refuses a send to anyone who has not texted you
 
 ## First: check this skill matches the SDK
 
-This skill is for SDK version `0.3.621`. If the project has `node_modules/@north-light/sdk/package.json`, compare its `version` with that number. If they differ, run `npx @north-light/sdk skill` in the project, then read the rewritten `.agents/skills/northlight/SKILL.md` (or `.claude/skills/northlight/SKILL.md`) instead of this copy. It needs no account. A project that has no SDK yet starts with `npx @north-light/sdk@latest init <dir>`.
+This skill is for SDK version `0.3.623`. If the project has `node_modules/@north-light/sdk/package.json`, compare its `version` with that number. If they differ, run `npx @north-light/sdk skill` in the project, then read the rewritten `.agents/skills/northlight/SKILL.md` (or `.claude/skills/northlight/SKILL.md`) instead of this copy. It needs no account. A project that has no SDK yet starts with `npx @north-light/sdk@latest init <dir>`.
 
 ## Where things run
 

package/dist/version.d.ts

@@ -1,5 +1,5 @@
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export declare const SDK_VERSION = "0.3.621";
+export declare const SDK_VERSION = "0.3.623";
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the
  *  contract level existed (which only knows this header) refuses this SDK, while every later runtime accepts it. */
 export declare const LEGACY_FLOOR = "0.3.423";

package/dist/version.js

@@ -1,6 +1,6 @@
 // SDK_VERSION is written by scripts/release-version.mjs on every release; do not edit by hand.
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export const SDK_VERSION = '0.3.621';
+export const SDK_VERSION = '0.3.623';
 // LEGACY_FLOOR is written once by `scripts/contract.mjs release`, at the first release that carries the contract level
 // (the `0.0.0` placeholder is replaced there and never again); do not edit by hand.
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@north-light/sdk",
-  "version": "0.3.621",
-  "crouterContract": "1.48",
+  "version": "0.3.623",
+  "crouterContract": "1.49",
   "description": "Typed Node and browser client for running crouter agents through the crtrd /v1 API.",
   "type": "module",
   "main": "./dist/index.js",
@@ -44,9 +44,9 @@
     "prepublishOnly": "node -e \"if (process.env.npm_config_tag !== 'next') { console.error('@north-light/sdk publishes only with --tag next; scripts/promote-sdk.mjs is the only mover of latest.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@north-light/api": "0.3.621",
-    "@north-light/identity": "0.3.621",
-    "@north-light/plugin": "0.3.621",
+    "@north-light/api": "0.3.623",
+    "@north-light/identity": "0.3.623",
+    "@north-light/plugin": "0.3.623",
     "jose": "^6.2.1"
   },
   "peerDependencies": {