@omelhorsite/sdk 0.12.0 → 0.12.2

package/README.md

@@ -100,7 +100,7 @@ const rows = await oms.http.get<{ id: string }[]>("/some/path");
 
 ## Namespaces
 
-- `oms.auth` - OAuth: device grant, refresh, revoke, `whoami`.
+- `oms.auth` - OAuth: device grant, refresh, revoke, `whoami`. `decodeIdToken(idToken).sub` is the stable identifier; `email` is a contact and `email_verified` is often `false`, so never find or merge users by email.
 - `oms.sessions`, `oms.passkeys` - sign-in, sign-up, OTP, passkeys.
 - `oms.account` - the signed-in user, profile, sessions, usage. `oms.account.notificationPreferences` decides, per notification kind, whether it shows in the inbox and whether it is emailed; the security kinds always email, unless the master switch is off.
 - `oms.storage` - files and folders: upload, download, share.

package/dist/index.js

@@ -10328,6 +10328,7 @@ function updateBody(input) {
     library_public: input.libraryPublic,
     library_name: input.libraryName,
     library_description: input.libraryDescription,
+    language: input.language,
     share_listening: input.shareListening
   };
 }
@@ -10747,6 +10748,7 @@ function adminUpdateBody(input) {
   set("library_public", input.libraryPublic);
   set("library_name", input.libraryName);
   set("library_description", input.libraryDescription);
+  set("language", input.language);
   set("share_listening", input.shareListening);
   set("email", input.email);
   set("group", input.group);

package/dist/types/auth/tokens.d.ts

@@ -55,8 +55,22 @@ export interface IdentityClaims {
     readonly iat?: number;
     /** Present only when the `profile` scope was granted. Mutable, display only. */
     readonly preferred_username?: string;
-    /** Present only when the `email` scope was granted. Mutable, display only. */
+    /**
+     * Present only when the `email` scope was granted. Mutable, display only.
+     *
+     * Never look a user up by this. An account can be created with any address
+     * and used without proving it, so the value may belong to someone else;
+     * matching on it lets whoever registers with a victim's address into the
+     * victim's account on your side. Key on `iss` + `sub`.
+     */
     readonly email?: string;
+    /**
+     * Whether the server holds proof that `email` belongs to the user. Present
+     * whenever `email` is, and often `false`. `true` still only means the
+     * server checked it once; confirm it yourself before attaching the address
+     * to an account that already existed.
+     */
+    readonly email_verified?: boolean;
     readonly [claim: string]: unknown;
 }
 /**

package/dist/types/resources/account.d.ts

@@ -28,6 +28,8 @@ export interface User extends BaseRecord {
     readonly bio?: string | null;
     /** ISO 3166-1 alpha-2, as the user set it. */
     readonly country_code?: string | null;
+    /** `en`, `pt` or `lv`: the language of the emails sent to this account. Own account only. */
+    readonly language?: string | null;
     readonly email_is_public?: boolean;
     readonly gender_is_public?: boolean;
     readonly library_public?: boolean;
@@ -90,6 +92,8 @@ export interface UpdateAccountInput {
     readonly libraryName?: string | null;
     /** `null` clears it. */
     readonly libraryDescription?: string | null;
+    /** `en`, `pt` or `lv`. */
+    readonly language?: string;
     /** Whether friends may see what you are listening to. */
     readonly shareListening?: boolean;
 }

package/dist/types/resources/admin/users.d.ts

@@ -20,6 +20,7 @@ export interface AdminUpdateUserInput {
     readonly libraryPublic?: boolean;
     readonly libraryName?: string | null;
     readonly libraryDescription?: string | null;
+    readonly language?: string;
     readonly shareListening?: boolean;
     readonly email?: string;
     /** Privilege group, e.g. `"administrator"`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omelhorsite/sdk",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "TypeScript SDK for the omelhorsite API. Isolate-safe: no node builtins, no environment access, no stdout.",
   "type": "module",
   "license": "UNLICENSED",