@qaecy/cue-sdk 0.0.55 → 0.0.57

package/index.d.ts

@@ -4,6 +4,7 @@ export { CueStorage } from './lib/storage';
 export type { StorageBucket } from './lib/storage';
 export type { GisBBox, GisCategoryDescriptor, GisFeature, GisFeaturesMap, FeatureCategory } from './lib/gis';
 export { CueAuth, CueAuthError } from './lib/auth';
+export type { CueActionCodeInfo, CueActionOperation } from './lib/auth';
 export { CueSignUp, CueRequestError } from './lib/signup';
 export type { OrgSignUpPayload, OrgSignUpPlan } from './lib/signup';
 export { CueApi } from './lib/api';

package/index.js

@@ -1,4 +1,4 @@
-import { B as C, C as u, a as i, b as r, c as o, d as t, e as n, f as S, g as c, h as E, i as m, j as p, k as A, l, m as P, n as R, o as _, p as d, q as I, r as g, s as T, t as D, u as O, v as N, w as U, x as h, y as G, z as f, A as j, D as v, E as x, F as M, G as y, H as B, I as F, J as L, K as H, L as b, M as K, N as q, O as w, P as Q, Q as V, R as W, S as X, T as Y, U as k, V as z, W as J, X as Z, Y as $, Z as aa, _ as ea, $ as sa, a0 as Ca, a1 as ua, a2 as ia, a3 as ra, a4 as oa, a5 as ta, a6 as na } from "./models-DytxsTwc.js";
+import { B as C, C as u, a as i, b as r, c as o, d as t, e as n, f as S, g as c, h as E, i as m, j as p, k as A, l, m as P, n as R, o as _, p as d, q as I, r as g, s as T, t as D, u as O, v as N, w as U, x as h, y as G, z as f, A as j, D as v, E as x, F as M, G as y, H as B, I as F, J as L, K as H, L as b, M as K, N as q, O as w, P as Q, Q as V, R as W, S as X, T as Y, U as k, V as z, W as J, X as Z, Y as $, Z as aa, _ as ea, $ as sa, a0 as Ca, a1 as ua, a2 as ia, a3 as ra, a4 as oa, a5 as ta, a6 as na } from "./models-DCFnaBFw.js";
 import "uuid";
 export {
   C as BASE_CURRENCY,

package/lib/auth.d.ts

@@ -2,6 +2,15 @@ import { Auth, User } from 'firebase/auth';
 import { FirebaseApp } from 'firebase/app';
 import { CueEndpoints, PasswordCredentials, SsoProvider } from './models';
 import { ReadonlySignal } from './signal';
+/** What an email action link (`/auth/action?mode=…&oobCode=…`) does. */
+export type CueActionOperation = 'resetPassword' | 'verifyEmail' | 'changeEmail' | 'recoverEmail' | 'other';
+export interface CueActionCodeInfo {
+    operation: CueActionOperation;
+    /** The account's address — for `changeEmail` the NEW one, for `recoverEmail` the restored one. */
+    email: string;
+    /** For `changeEmail` and `recoverEmail`: the address being replaced. */
+    previousEmail?: string;
+}
 export type AuthStateListener = (user: User | null) => void;
 export type Unsubscribe = () => void;
 /**
@@ -41,6 +50,15 @@ export declare class CueAuth {
     signIn(provider: SsoProvider): Promise<User>;
     /** Sign in with email and password */
     signIn(provider: 'password', credentials: PasswordCredentials): Promise<User>;
+    /**
+     * Sign in with Google tokens obtained outside Firebase's popup, e.g. by the desktop app
+     * through the gateway's OAuth pages in the system browser (Google refuses OAuth inside
+     * embedded webviews). Same checks as the popup: the backend confirms the SSO sign-in.
+     */
+    signInWithGoogleTokens(tokens: {
+        idToken?: string;
+        accessToken?: string;
+    }): Promise<User>;
     /**
      * Initiate a redirect-based sign-in (mobile / iframe contexts where popups
      * are blocked). Call `checkRedirectResult()` on the next page load to
@@ -81,11 +99,23 @@ export declare class CueAuth {
      */
     mintAppSessionToken(): Promise<string>;
     /**
-     * Send a password-reset email. Firebase's email-enumeration protection makes
-     * this succeed silently for unknown addresses, so callers should word their
-     * confirmation as "if an account exists…".
+     * Send a password-reset email (through the Cue backend, in the Cue layout).
+     * The backend answers the same for unknown addresses, so callers should word
+     * their confirmation as "if an account exists…".
      */
     resetPassword(email: string): Promise<void>;
+    /** Reads an email action link's code without using it up. */
+    inspectActionCode(code: string): Promise<CueActionCodeInfo>;
+    /** Uses a verify-email, change-email or recover-email code. */
+    applyActionCode(code: string): Promise<void>;
+    /** Sets a new password with a reset code from a password-reset email. */
+    confirmPasswordReset(code: string, newPassword: string): Promise<void>;
+    /**
+     * Re-reads the signed-in user from Firebase and refreshes the token, e.g. so
+     * `emailVerified` is current after a verification link was used. Resolves to
+     * the fresh `emailVerified`, or false when signed out.
+     */
+    refreshUser(): Promise<boolean>;
     /** Sign out the current user */
     signOut(): Promise<void>;
     /** Currently signed-in user, or null if not authenticated */

package/lib/models.d.ts

@@ -21,6 +21,13 @@ export interface CueSdkConfig {
     appId?: string;
     /** Firebase Measurement ID. Defaults to the QAECY demo app if omitted. */
     measurementId?: string;
+    /**
+     * Host serving Firebase's sign-in handler (`/__/auth/*`). Google and
+     * Microsoft show it on their sign-in screens, so an app that proxies the
+     * handler on its own domain passes that domain here. Defaults to
+     * `<project>.firebaseapp.com`.
+     */
+    authDomain?: string;
     /** Target environment. Defaults to 'production'. */
     environment?: CueEnvironment;
     /** Override individual endpoint URLs. Takes precedence over environment. */

package/lib/profile.d.ts

@@ -37,7 +37,12 @@ export declare class CueProfile {
     updatePassword(currentPassword: string, newPassword: string): Promise<void>;
     /** Adds (sets) a password for an account that currently only uses SSO. */
     addPassword(password: string): Promise<void>;
-    /** Requests an e-mail change. Sends a verification e-mail to the new address. */
+    /**
+     * Requests an e-mail change. The backend checks `password` and sends a
+     * confirmation link to the new address; the change happens when it's
+     * followed. Throws `CueRequestError` with `code` 'wrongPassword' |
+     * 'emailExists' | 'sameEmail' | 'noEmail' | 'tooManyAttempts'.
+     */
     updateEmail(newEmail: string, password: string): Promise<void>;
     /** Creates a new API key for the current user. */
     createAPIKey(expiration: string): Promise<APIKeyDoc>;