@robosystems/core 0.7.1 → 0.7.2

package/auth-core/client.d.ts

@@ -1,4 +1,4 @@
-import type { APIKey, AuthResponse, AuthUser, CreateAPIKeyRequest, SSOTokenResponse } from './types';
+import type { APIKey, AuthProviders, AuthResponse, AuthUser, CreateAPIKeyRequest, SSOTokenResponse } from './types';
 export declare class TokenExpiredError extends Error {
     constructor(message?: string);
 }
@@ -55,6 +55,14 @@ export declare class RoboSystemsAuthClient {
     }>;
     ssoComplete(sessionId: string): Promise<AuthResponse>;
     checkAuthentication(): Promise<AuthUser | null>;
+    /**
+     * Fetch the deployment's auth posture (which sign-in methods to render).
+     *
+     * A rendering hint, not a security boundary — the backend enforces every
+     * flag regardless of what the page shows. Any failure returns null and
+     * the caller renders the default password posture.
+     */
+    getAuthProviders(): Promise<AuthProviders | null>;
     clearAuthCache(): void;
     /**
      * Send password reset email

package/auth-core/client.js

@@ -1,5 +1,5 @@
 var _a;
-import { checkPasswordStrength, client, completeSsoAuth, createUserApiKey, forgotPassword, generateSsoToken, getCurrentAuthUser, getInvitationPreview, getPasswordPolicy, listUserApiKeys, loginUser, logoutUser, refreshAuthSession, registerUser, resendVerificationEmail, resetPassword, revokeUserApiKey, ssoTokenExchange, validateResetToken, verifyEmail, } from '@robosystems/client';
+import { checkPasswordStrength, client, completeSsoAuth, createUserApiKey, forgotPassword, generateSsoToken, getAuthProviders, getCurrentAuthUser, getInvitationPreview, getPasswordPolicy, listUserApiKeys, loginUser, logoutUser, refreshAuthSession, registerUser, resendVerificationEmail, resetPassword, revokeUserApiKey, ssoTokenExchange, validateResetToken, verifyEmail, } from '@robosystems/client';
 import * as sdkClientsModule from '@robosystems/client/clients';
 import { getToken, getValidToken } from './token-storage';
 // Global config hook for the clients package's lazy default singleton
@@ -491,6 +491,26 @@ export class RoboSystemsAuthClient {
             return null;
         }
     }
+    /**
+     * Fetch the deployment's auth posture (which sign-in methods to render).
+     *
+     * A rendering hint, not a security boundary — the backend enforces every
+     * flag regardless of what the page shows. Any failure returns null and
+     * the caller renders the default password posture.
+     */
+    async getAuthProviders() {
+        try {
+            const response = await getAuthProviders({ client: this.client });
+            const data = response.data;
+            if (!data || typeof data.password_auth !== 'boolean') {
+                return null;
+            }
+            return data;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
     // Clear request deduplication cache (useful after login/logout)
     clearAuthCache() {
         this.lastAuthCheck = null;

package/auth-core/types.d.ts

@@ -14,6 +14,23 @@ export interface AuthResponse {
     expires_in?: number;
     refresh_threshold?: number;
 }
+/**
+ * Deployment auth posture from `GET /v1/auth/providers`.
+ *
+ * A rendering hint, not a security boundary — the backend enforces every
+ * flag regardless of what the login surface shows. One byte-identical
+ * frontend build renders password-primary (managed), OIDC-primary
+ * (tenant), or closed-registration postures from this payload.
+ */
+export interface AuthProviders {
+    password_auth: boolean;
+    oidc: {
+        enabled: boolean;
+        provider_label?: string | null;
+    };
+    registration: boolean;
+    passkeys: boolean;
+}
 export interface LoginRequest {
     email: string;
     password: string;

package/index.d.ts

@@ -26,7 +26,7 @@ export type { TaskCreateResponse, TaskMonitorState, TaskPollingOptions, TaskStat
 export { useGraphCreation, useOperationMonitoring, useRepositorySubscription, type OperationMonitorState, type UseOperationMonitoringResult, } from './task-monitoring/operationHooks';
 import { client } from '@robosystems/client';
 export { client };
-export type { APIKey, AppName, AuthContextType, AuthUser } from './auth-core';
+export type { APIKey, AppName, AuthContextType, AuthProviders, AuthUser, } from './auth-core';
 export { CURRENT_APP } from './auth-core/config';
 export { getLoginHomeUrl, isLoginHome, LOGIN_HOME_APP, } from './auth-core/config';
 export { buildLoginHomeUrl, buildReturnTo, isSafeRelativePath, parseReturnTo, } from './auth-core/login-home';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robosystems/core",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Shared RoboSystems frontend core library (auth, contexts, task monitoring, UI components) for the RoboSystems Next.js apps",
   "license": "MIT",
   "private": false,
@@ -27,7 +27,7 @@
     "tailwind-merge": "^3"
   },
   "peerDependencies": {
-    "@robosystems/client": ">=1.2 <2",
+    "@robosystems/client": ">=1.9 <2",
     "flowbite-react": "^0.12.5",
     "next": ">=15 <17",
     "react": ">=18 <20",