@prabhask5/stellar-engine 1.0.11 → 1.0.13

package/dist/auth/singleUser.d.ts

@@ -1,11 +1,20 @@
 /**
  * Single-User Auth Module
  *
- * Implements a local gate (code or password) verified against a SHA-256 hash
- * stored in IndexedDB. Uses Supabase anonymous auth for session/token management
- * and RLS compliance. Falls back to offline auth when connectivity is unavailable.
+ * Uses Supabase email/password auth where the PIN *is* the password (padded).
+ * Replaces the previous anonymous auth + client-side SHA-256 hash approach.
+ *
+ * - Setup: signUp() with email + padded PIN
+ * - Unlock: signInWithPassword() with email + padded PIN
+ * - Device verification: signInWithOtp() for untrusted devices
+ * - Offline fallback: cached credentials in IndexedDB
  */
 import type { SingleUserConfig } from '../types';
+/**
+ * Pad a PIN to meet Supabase's minimum password length.
+ * e.g. "1234" → "1234_stellar" (12 chars, well above the 6-char minimum)
+ */
+export declare function padPin(pin: string): string;
 /**
  * Check if single-user mode has been set up (config exists in IndexedDB).
  */
@@ -18,19 +27,44 @@ export declare function getSingleUserInfo(): Promise<{
     profile: Record<string, unknown>;
     gateType: SingleUserConfig['gateType'];
     codeLength?: 4 | 6;
+    email?: string;
+    maskedEmail?: string;
 } | null>;
 /**
- * First-time setup: hash gate, create anonymous Supabase user (if online),
- * store config, and set auth state.
+ * First-time setup: create Supabase user with email/password auth.
+ *
+ * Uses signUp() which sends a confirmation email if emailConfirmation is enabled.
+ * The PIN is padded to meet Supabase's minimum password length.
+ *
+ * @returns confirmationRequired — true if the caller should show a "check your email" modal
  */
-export declare function setupSingleUser(gate: string, profile: Record<string, unknown>): Promise<{
+export declare function setupSingleUser(gate: string, profile: Record<string, unknown>, email: string): Promise<{
     error: string | null;
+    confirmationRequired: boolean;
 }>;
 /**
- * Unlock: verify gate hash, restore Supabase session or fall back to offline auth.
+ * Complete setup after email confirmation succeeds.
+ * Called when the original tab receives AUTH_CONFIRMED via BroadcastChannel.
+ */
+export declare function completeSingleUserSetup(): Promise<{
+    error: string | null;
+}>;
+/**
+ * Unlock: verify PIN via signInWithPassword, handle device verification.
+ *
+ * Returns deviceVerificationRequired if the device is untrusted.
  */
 export declare function unlockSingleUser(gate: string): Promise<{
     error: string | null;
+    deviceVerificationRequired?: boolean;
+    maskedEmail?: string;
+}>;
+/**
+ * Complete device verification after OTP email link is clicked.
+ * Called when the original tab receives AUTH_CONFIRMED via BroadcastChannel.
+ */
+export declare function completeDeviceVerification(tokenHash?: string): Promise<{
+    error: string | null;
 }>;
 /**
  * Lock: stop sync engine, reset auth state to 'none'.
@@ -38,7 +72,7 @@ export declare function unlockSingleUser(gate: string): Promise<{
  */
 export declare function lockSingleUser(): Promise<void>;
 /**
- * Change the gate (code/password). Verifies old gate first.
+ * Change the gate (code/password). Verifies old gate via signInWithPassword.
  */
 export declare function changeSingleUserGate(oldGate: string, newGate: string): Promise<{
     error: string | null;
@@ -49,6 +83,22 @@ export declare function changeSingleUserGate(oldGate: string, newGate: string):
 export declare function updateSingleUserProfile(profile: Record<string, unknown>): Promise<{
     error: string | null;
 }>;
+/**
+ * Initiate an email change. Requires online state.
+ * Supabase sends a confirmation email to the new address.
+ */
+export declare function changeSingleUserEmail(newEmail: string): Promise<{
+    error: string | null;
+    confirmationRequired: boolean;
+}>;
+/**
+ * Complete email change after the user confirms via the email link.
+ * Called when the original tab receives AUTH_CONFIRMED with type 'email_change'.
+ */
+export declare function completeSingleUserEmailChange(): Promise<{
+    error: string | null;
+    newEmail: string | null;
+}>;
 /**
  * Full reset: clear config, sign out of Supabase, clear all data.
  */

package/dist/auth/singleUser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"singleUser.d.ts","sourceRoot":"","sources":["../../src/auth/singleUser.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AA4CjD;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO1D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACpB,GAAG,IAAI,CAAC,CAQR;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAgHnC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA2InC;AAED;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAYpD;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAoDnC;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA0DnC;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA2BzE"}
+{"version":3,"file":"singleUser.d.ts","sourceRoot":"","sources":["../../src/auth/singleUser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAwBjD;;;GAGG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1C;AAyBD;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO1D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,IAAI,CAAC,CAUR;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,oBAAoB,EAAE,OAAO,CAAA;CAAE,CAAC,CAwHlE;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAoDjF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8H/F;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA6CtG;AAED;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAWpD;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA8DnC;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA8CnC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,oBAAoB,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBlE;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,IAAI,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA6ChH;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAkBzE"}