@settlemint/dalp-sdk 3.1.5-main.32670705612 → 3.1.5-release.32679963579

package/README.md

@@ -1,140 +1,206 @@
-# DALP SDK
-
-The DALP SDK is a Promise-based client generated from the canonical v2 OpenAPI
-declaration ([Hey API](https://heyapi.dev/)), validated at runtime with
-[zod](https://zod.dev/). It is Effect-free: no `Effect` values, no branded
-Effect Schema identifiers on the wire.
+<p align="center">
+  <img src="https://github.com/settlemint/sdk/blob/main/logo.svg" width="200px" align="center" alt="SettleMint logo" />
+  <h1 align="center">DALP SDK</h1>
+  <p align="center">
+    <a href="https://settlemint.com">https://settlemint.com</a>
+    <br/>
+    Fully typed TypeScript SDK for the Digital Asset Lifecycle Platform API.
+  </p>
+</p>
+
+<p align="center">
+<a href="https://www.npmjs.com/package/@settlemint/dalp-sdk" rel="nofollow"><img src="https://img.shields.io/npm/v/@settlemint/dalp-sdk" alt="npm version"></a>
+<a href="https://www.npmjs.com/package/@settlemint/dalp-sdk" rel="nofollow"><img src="https://img.shields.io/npm/dw/@settlemint/dalp-sdk" alt="npm downloads"></a>
+</p>
+
+<div align="center">
+  <a href="https://settlemint.com">Website</a>
+  <span>&nbsp;&nbsp;&bull;&nbsp;&nbsp;</span>
+  <a href="https://www.npmjs.com/package/@settlemint/dalp-sdk">NPM</a>
+  <span>&nbsp;&nbsp;&bull;&nbsp;&nbsp;</span>
+  <a href="mailto:support@settlemint.com">Support</a>
+  <br />
+</div>
+
+## About
+
+The DALP SDK provides a fully typed client for the Digital Asset Lifecycle Platform API. Built on [oRPC](https://orpc.unnoq.com/) with contract-first types, it gives you auto-complete for every API namespace — tokens, identities, compliance, transactions, and more.
+
+## Installation
+
+```bash
+# npm
+npm install @settlemint/dalp-sdk
+
+# bun
+bun add @settlemint/dalp-sdk
+```
 
-## Client
+## Quick Start
 
-```ts
+```typescript
 import { createDalpClient } from "@settlemint/dalp-sdk";
 
 const dalp = createDalpClient({
-  baseUrl: "https://dalp.example.com",
+  url: "https://dalp.example.com",
   apiKey: "sm_dalp_...",
+  organizationId: "org_...", // optional, for multi-org setups
 });
 
-const tokens = await dalp.token.list({ query: {} }, { signal });
+// Every method is fully typed with auto-complete
+const tokens = await dalp.token.list({ query: {} });
+const system = await dalp.system.read({});
 ```
 
-`createDalpClient` owns shared transport policy once: the credential mechanism
-(session cookie in the browser and on SSR, or an `X-Api-Key` header for
-server/CLI callers — never both from the same runtime), organization headers,
-idempotency keys, `Prefer`, conditional `If-None-Match` / ETag reuse, custom fetch
-injection, and abort propagation. See the "Credential ownership matrix" JSDoc
-on `createDalpClient` in `src/client/factory.ts` for which runtime may use
-which credential.
+## Auth Client
 
-Response decoding is strict: every generated operation parses its response
-against the declared zod schema and throws on a mismatch.
+Use `createDalpAuthClient` for Better Auth operations such as sign-up, session listing, organization management, API
+keys, device authorization, and wallet verification setup.
 
-### Conditional requests and ETags
+```typescript
+import { createDalpAuthClient } from "@settlemint/dalp-sdk";
 
-`createDalpClient` installs `If-None-Match` / 304 interceptors that reuse a
-held body when the server returns a matching ETag. Server ETags must be
-**strong content digests** computed **after authorization** inside the
-requester's partition. The dapi response cache guarantees this: it hashes the
-serialized body after the request-context middleware has authenticated the
-session. Version-stamp ETags (generation counters, watermarks, table versions)
-are forbidden for conditional-request adopters — a stamp can collide across
-tenants or lag a body change.
+const auth = createDalpAuthClient({
+  url: "https://dalp.example.com",
+  apiKey: "sm_dalp_...",
+  organizationId: "org_...",
+});
 
-Identity changes that do not ride this client (browser sign-out, organization
-switch) must call `clearConditionalRequestStore(client)` so a later GET cannot
-send another session's `If-None-Match`.
+const apiKeys = await auth.apiKey.list();
+```
 
-```ts
-import { clearConditionalRequestStore, createDalpClient } from "@settlemint/dalp-sdk";
+For Node-side session flows, use the platform client. It keeps Better Auth cookies in an SDK-owned store and exposes the
+DAPI client and auth client together.
 
-clearConditionalRequestStore(dalp);
-```
+```typescript
+import { createDalpPlatformClient } from "@settlemint/dalp-sdk";
 
-## Generated operations
+const platform = createDalpPlatformClient({
+  url: "https://dalp.example.com",
+});
+
+await platform.auth.signUp.email({
+  email: "user@example.com",
+  password: "Password123!",
+  name: "Example User",
+});
 
-```ts
-import { createClient } from "@settlemint/dalp-sdk/operations";
+const sessionCookie = platform.cookieStore.header;
 ```
 
-`./operations` re-exports the generated v2 operation functions and generated
-client primitives (585 operations) on their own subpath, so a consumer who
-only signs webhooks or builds a client never loads that module. Pair it with
-`createDalpClient` from the package root.
-
-## Scalars
-
-Custom wire formats — BigDecimal amounts, EVM addresses, and the
-`OrganizationId` entity brand — are not expressed structurally in the
-generated OpenAPI spec (it carries no `format:`/`x-` extension for them), so
-each has a hand-maintained wrapper under `src/scalars/`:
-`big-decimal.ts`, `ethereum-address.ts`, `exchange-rates.ts`,
-`organization-id.ts`. `OrganizationId` is the only entity ID branded
-end-to-end across the platform (see `AGENTS.md`); every other identifier
-crossing this SDK's boundary is a plain string. `tools/scripts/src/check-sdk-scalar-coverage.ts`
-gates new generated scalar-shaped symbols against a curated allowlist so a
-spec change that introduces a new custom scalar fails the build instead of
-shipping unwrapped.
-
-## React Query
-
-```ts
-import { tokenListOptions } from "@settlemint/dalp-sdk/react-query";
+### Auth Namespaces
+
+All namespaces below are fully typed on `DalpAuthClient` — every operation has auto-complete and a typed return value.
+
+| Namespace             | Operations                                                                                                    | Description                                                |
+| --------------------- | ------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- |
+| `signIn`              | `email`                                                                                                       | Sign in with email and password                            |
+| `signUp`              | `email`                                                                                                       | Register a new account                                     |
+| `getSession`          | —                                                                                                             | Fetch the current session                                  |
+| `listSessions`        | —                                                                                                             | List all active sessions                                   |
+| `revokeSession`       | —                                                                                                             | Revoke a specific session                                  |
+| `revokeOtherSessions` | —                                                                                                             | Revoke all sessions except the current one                 |
+| `apiKey`              | `create`, `list`, `delete`                                                                                    | Manage API keys                                            |
+| `organization`        | `create`, `list`, `setActive`, `inviteMember`, `acceptInvitation`, `listMembers`, `addMember`, `removeMember` | Manage organizations and membership                        |
+| `admin`               | `listUsers`, `createUser`, `removeUser`, `setRole`                                                            | Administrative user management                             |
+| `device`              | `code`, `token`, `approve`, `deny`                                                                            | Device authorization flow                                  |
+| `twoFactor`           | `enable`, `disable`, `verifyTotp`, `verifyBackupCode`, `generateBackupCodes`                                  | Account-level TOTP two-factor authentication               |
+| `wallet.pincode`      | `enable`, `disable`, `update`, `reset`                                                                        | Wallet pincode protection                                  |
+| `wallet.twoFactor`    | `enable`, `disable`, `verify`                                                                                 | Wallet two-factor verification                             |
+| `wallet.secretCodes`  | `generate`, `confirm`                                                                                         | Wallet secret (recovery) codes                             |
+| `passkey`             | —                                                                                                             | Account-level passkey registration (browser/WebAuthn only) |
+
+```typescript
+// Enable account-level 2FA and verify a TOTP code
+await auth.twoFactor.enable({ password: "..." });
+await auth.twoFactor.verifyTotp({ code: "123456" });
 ```
 
-`./react-query` re-exports the generated TanStack Query option factories
-(`queryOptions`, `infiniteOptions`, `mutationOptions`) — spread into your own
-hooks; the generator emits no hooks itself. This is the only module that
-imports `@tanstack/react-query`, so that peer dependency stays optional for
-non-React consumers.
+```typescript
+// Enable wallet pincode protection
+await auth.wallet.pincode.enable({ pincode: "1234", password: "..." });
+```
 
-## Auth
+## Configuration
 
-```ts
-import { createDalpAuthClient } from "@settlemint/dalp-sdk/auth";
-```
+```typescript
+import { createDalpClient } from "@settlemint/dalp-sdk";
+
+const dalp = createDalpClient({
+  // Required
+  url: "https://dalp.example.com",
 
-The generated SDK already exposes every auth REST operation; `./auth` covers
-what a REST call cannot express — the session/cookie state machine, plugin
-actions that must run in the browser (`passkeyClient` drives the WebAuthn
-ceremony through `navigator.credentials`), and the access-control model that
-evaluates a permission locally instead of round-tripping `has-permission`. Off
-the package root because it costs roughly 70 KiB of Better Auth a
-pure-operations consumer should not pay.
+  // Required for authenticated routes
+  apiKey: "sm_dalp_...",
 
-## Bundler and paymaster
+  // Optional
+  organizationId: "org_...", // multi-org scoping
+  headers: { "User-Agent": "MyApp" }, // override default headers
+  idempotencyKey: "req_abc123", // ⚠️ sent on EVERY request — use only for single-mutation clients
+  requestValidation: false, // validate requests client-side (default: false)
+  responseValidation: false, // validate responses client-side (default: false)
+  fetch: customFetch, // custom fetch implementation
+});
+```
 
-```ts
-import { createDalpBundlerClient } from "@settlemint/dalp-sdk/bundler";
+## API Namespaces
+
+| Namespace          | Description                |
+| ------------------ | -------------------------- |
+| `account`          | Manage accounts            |
+| `actions`          | Manage actions             |
+| `addons`           | Manage addons              |
+| `admin`            | Administrative operations  |
+| `contacts`         | Manage contacts            |
+| `exchangeRates`    | View exchange rates        |
+| `externalToken`    | Manage external tokens     |
+| `identityRecovery` | Recover lost identities    |
+| `monitoring`       | Platform monitoring        |
+| `search`           | Search across the platform |
+| `settings`         | Platform settings          |
+| `system`           | System administration      |
+| `token`            | Manage security tokens     |
+| `transaction`      | View transactions          |
+| `user`             | Manage platform users      |
+
+## Endpoint Coverage
+
+The SDK covers 100% of the v2 REST API: it is generated from the same oRPC contract that the server implements, and a
+CI check (`bun run check:sdk-coverage`) diffs every mounted API route against the contract on every change. Endpoints
+intentionally outside the SDK contract are named in a committed allowlist with a reason each, in these categories:
+
+- **v1-frozen** — the deliberately frozen v1 REST surface
+- **internal-ops** — health probes, CSP report sink, theme CSS, static manifests
+- **webhook-receiver** — provider webhook receivers (DFNS, Ripple, compliance providers)
+- **better-auth** — auth plumbing, covered by the SDK auth client instead
+- **docs / asset-delivery / bundler / orpc-mount** — API docs pages, binary asset delivery, the ERC-4337 bundler
+  JSON-RPC passthrough (covered by the SDK bundler client), and the oRPC transport mounts themselves
+
+## Subpath Exports
+
+```typescript
+// Main entry — client factory, error codes, serializers
+import { createDalpAuthClient, createDalpClient, createDalpPlatformClient } from "@settlemint/dalp-sdk";
+
+// Type-only — for function signatures without runtime code
+import type { DalpClient, DalpClientConfig } from "@settlemint/dalp-sdk/types";
+
+// Plugins — optional oRPC link plugins for advanced usage
+import { BatchLinkPlugin, RequestValidationPlugin } from "@settlemint/dalp-sdk/plugins";
 ```
 
-`createDalpBundlerClient` retains the eight established ERC-4337 method names
-while calling the generated v2 REST resources underneath. The SDK accepts
-EntryPoint v0.9 `viem` shapes and returns the corresponding typed values.
-
-## Webhooks and transaction wait
-
-- `./verify-webhook` — verify an inbound webhook signature.
-- `./sign-webhook-receipt` — sign a webhook delivery receipt (Node-only).
-- `./wait-for-transaction` — bounded poll for on-chain transaction settlement;
-  calls a generated operation and so inherits the generated validator
-  module's full weight.
-
-## Package root
-
-The package root (`@settlemint/dalp-sdk`) stays deliberately small — the
-client factory, its config and errors, cookie-store transport, SSE lifecycle
-handling, and SDK version constants — so a consumer
-who only needs to call operations never pays for auth, bundler, react-query,
-or webhook code. See the `@module` doc at the top of `src/index.ts` for the
-current weight breakdown per subpath.
-
-## Migrating from the Effect client
-
-Prior major versions exposed an `Effect`-returning client
-(`makeDalpEffectClient`, `makeDalpApiLayer`, `DalpEffectClient`) alongside the
-Promise client. That dual surface, the `contracts/` schema re-exports, and
-`makeDalpPlatformClient`/`waitForTransactionEffect` are removed — see
-`CHANGELOG.md` and the
-[v2 migration guide](../docs/content/docs/api-reference/reference/v2-migration.mdx).
-No published consumer depended on the Effect surface, so this ships without a
-major version bump.
+## Security
+
+- **API key authentication** — issued via the DALP dashboard (Settings → API Keys) or via `dalp login`
+- Public routes can be called without an API key; authenticated routes still require one
+- Security headers (`x-api-key`, `x-organization-id`) cannot be overridden by custom headers
+- Client-side request validation can be enabled to catch schema violations early
+
+## Errors
+
+DAPI errors thrown by the SDK use `DalpSdkError` and include `message`, `why`, `fix`, `status`, `retryable`, and the
+public DAPI error id when the server returns one.
+
+## License
+
+This project is licensed under the **SettleMint Commercial Customer Source License**. See the LICENSE file included in the package for full terms.

package/dist/{auth/permissions.d.ts → auth-permissions.d.ts}

@@ -1,7 +1,7 @@
 /**
  * Client-side Better Auth access-control metadata for DALP auth clients.
  *
- * Related: packages/dapi/auth/src/utils/permissions.ts, kit/sdk/src/auth/live.ts
+ * Related: packages/dalp/auth/src/utils/permissions.ts, kit/sdk/src/auth.ts
  *
  * @module
  */
@@ -10,3 +10,4 @@ export declare const accessControl: AccessControl;
 export declare const adminRole: Role;
 export declare const ownerRole: Role;
 export declare const memberRole: Role;
+//# sourceMappingURL=auth-permissions.d.ts.map

package/dist/auth-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-permissions.d.ts","sourceRoot":"","sources":["../src/auth-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,IAAI,EAAuB,MAAM,4BAA4B,CAAC;AAuBhG,eAAO,MAAM,aAAa,EAAE,aAI1B,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,IAOtB,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,IAMtB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,IAKvB,CAAC"}

package/dist/{auth/wallet-plugins.d.ts → auth-wallet-plugins.d.ts}

@@ -1,69 +1,3 @@
-import type { DalpAuthResult } from "./client.ts";
-export type WalletAuthOperation<TInput, TData> = (input: TInput, options?: unknown) => Promise<DalpAuthResult<TData>>;
-/** Typed client actions supplied by the three DALP wallet-auth plugins. */
-export interface DalpWalletAuthClient {
-    readonly wallet: {
-        readonly pincode: {
-            readonly enable: WalletAuthOperation<{
-                readonly pincode: string;
-                readonly password?: string;
-            }, {
-                readonly success: boolean;
-            }>;
-            readonly update: WalletAuthOperation<{
-                readonly newPincode: string;
-                readonly password: string;
-            }, {
-                readonly success: boolean;
-            }>;
-            readonly disable: WalletAuthOperation<{
-                readonly password: string;
-            }, {
-                readonly success: boolean;
-            }>;
-            readonly reset: WalletAuthOperation<{
-                readonly newPincode: string;
-                readonly recoveryCode: string;
-            }, {
-                readonly success: boolean;
-                readonly recoveryCodes?: ReadonlyArray<string>;
-            }>;
-        };
-        readonly twoFactor: {
-            readonly enable: WalletAuthOperation<{
-                readonly issuer?: string;
-                readonly password?: string;
-            }, {
-                readonly totpURI: string;
-            }>;
-            readonly verify: WalletAuthOperation<{
-                readonly code: string;
-            }, {
-                readonly status: boolean;
-            }>;
-            readonly disable: WalletAuthOperation<{
-                readonly password: string;
-            }, {
-                readonly status: boolean;
-            }>;
-        };
-        readonly secretCodes: {
-            readonly generate: WalletAuthOperation<{
-                readonly password?: string;
-            }, {
-                readonly rotated: boolean;
-                readonly secretCodes: ReadonlyArray<string>;
-                readonly verificationId: string;
-            }>;
-            readonly confirm: WalletAuthOperation<{
-                readonly stored: boolean;
-                readonly verificationId: string;
-            }, {
-                readonly success: boolean;
-            }>;
-        };
-    };
-}
 export declare const walletPincodeClient: () => {
     id: "wallet-pincode";
     $InferServerPlugin: {
@@ -144,7 +78,9 @@ export declare const walletSecretCodesClient: () => {
         signal: "$sessionSignal";
     }[];
 };
-export type StripLeadingSlash<T extends string> = T extends `/${infer Rest}` ? Rest : never;
-export type WalletPluginPathMethodKeys = keyof ReturnType<typeof walletPincodeClient>["pathMethods"] | keyof ReturnType<typeof walletTwoFactorClient>["pathMethods"] | keyof ReturnType<typeof walletSecretCodesClient>["pathMethods"];
+type StripLeadingSlash<T extends string> = T extends `/${infer Rest}` ? Rest : never;
+type WalletPluginPathMethodKeys = keyof ReturnType<typeof walletPincodeClient>["pathMethods"] | keyof ReturnType<typeof walletTwoFactorClient>["pathMethods"] | keyof ReturnType<typeof walletSecretCodesClient>["pathMethods"];
 /** CLI coverage keys for DALP wallet Better Auth plugin endpoints (no leading slash). */
-export type WalletAuthEndpointPath = StripLeadingSlash<WalletPluginPathMethodKeys>;
+export type WalletAuthEndpointPath = StripLeadingSlash<WalletPluginPathMethodKeys & string>;
+export {};
+//# sourceMappingURL=auth-wallet-plugins.d.ts.map

package/dist/auth-wallet-plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-wallet-plugins.d.ts","sourceRoot":"","sources":["../src/auth-wallet-plugins.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBK,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;CAoBG,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;CAmBC,CAAC;AAEtC,KAAK,iBAAiB,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC;AAErF,KAAK,0BAA0B,GAC3B,MAAM,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,aAAa,CAAC,GAC3D,MAAM,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,aAAa,CAAC,GAC7D,MAAM,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,aAAa,CAAC,CAAC;AAEpE,yFAAyF;AACzF,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,0BAA0B,GAAG,MAAM,CAAC,CAAC"}

package/dist/auth.d.ts

@@ -1,22 +1,115 @@
-/**
- * The DALP Better Auth client, on its own subpath.
- *
- * The generated SDK already exposes every auth REST operation, so nothing here
- * exists to reach an endpoint. This surface exists for the parts a REST call
- * cannot express: the session and cookie state machine, the plugin actions that
- * run in the browser rather than over HTTP — `passkeyClient` drives the WebAuthn
- * ceremony through `navigator.credentials` — and the access-control model that
- * evaluates a permission locally instead of round-tripping `has-permission`.
- *
- * It is held off the package root because it costs roughly 70 KiB of Better
- * Auth that a consumer who only calls operations should never pay.
- *
- * @module
- */
-export { createDalpAuthClient, makeDalpAuthClient } from "./auth/live.ts";
-export type { DalpAuthClient } from "./auth/live.ts";
-export { decodeDalpAuthClientConfig } from "./auth/client.ts";
-export type { DalpAuthClientConfig, 
-/** @deprecated Prefer `DalpAuthClient` — this is the typed operation surface, not a separate client. */
-DalpCliAuthClient, DalpAuthError, DalpAuthOperation, DalpAuthResult, DalpOrganizationMember, DalpOrganizationMembersQuery, DecodedDalpAuthClientConfig, } from "./auth/client.ts";
-export type { WalletAuthEndpointPath } from "./auth/wallet-plugins.ts";
+import { DalpCookieStore } from "./cookie-store.js";
+export interface DalpAuthClientConfig {
+    /** Base URL of the DALP API (e.g., `"https://dalp.example.com"`). */
+    url: string;
+    /** API key used for Better Auth API-key-authenticated operations. */
+    apiKey?: string;
+    /** Better Auth session token sent as an Authorization bearer token. */
+    sessionToken?: string;
+    /** Cookie header value for explicit Node/browser-session handoff. */
+    cookie?: string;
+    /** Cookie store for Node-side session persistence across Better Auth calls. */
+    cookieStore?: DalpCookieStore;
+    /**
+     * Organization ID for multi-tenant setups.
+     * Sent as `x-organization-id` when provided.
+     */
+    organizationId?: string;
+    /**
+     * Additional headers merged into every Better Auth request.
+     * Can override defaults like `User-Agent` but cannot override configured security headers.
+     */
+    headers?: Record<string, string>;
+    /**
+     * Custom `fetch` implementation.
+     * Use this to inject logging, proxy configuration, or test doubles.
+     */
+    fetch?: typeof globalThis.fetch;
+}
+export interface DalpAuthError {
+    code?: string;
+    message?: string;
+    status?: number;
+    statusText?: string;
+    [key: string]: unknown;
+}
+export interface DalpAuthResult<TData = unknown, TError = DalpAuthError> {
+    data: TData | null;
+    error: TError | null;
+}
+export type DalpAuthOperation<TInput = Record<string, unknown>, TData = unknown> = (input?: TInput, options?: unknown) => Promise<DalpAuthResult<TData>>;
+export interface DalpAuthClient {
+    signIn: Record<string, DalpAuthOperation> & {
+        email: DalpAuthOperation;
+    };
+    signUp: Record<string, DalpAuthOperation> & {
+        email: DalpAuthOperation;
+    };
+    getSession: DalpAuthOperation;
+    listSessions: DalpAuthOperation;
+    revokeSession: DalpAuthOperation;
+    revokeOtherSessions: DalpAuthOperation;
+    apiKey: Record<string, DalpAuthOperation> & {
+        create: DalpAuthOperation;
+        list: DalpAuthOperation;
+        delete: DalpAuthOperation;
+    };
+    organization: Record<string, DalpAuthOperation> & {
+        create: DalpAuthOperation;
+        list: DalpAuthOperation;
+        setActive: DalpAuthOperation;
+        inviteMember: DalpAuthOperation;
+        acceptInvitation: DalpAuthOperation;
+        listMembers: DalpAuthOperation;
+        addMember: DalpAuthOperation;
+        removeMember: DalpAuthOperation;
+    };
+    admin: Record<string, DalpAuthOperation> & {
+        listUsers: DalpAuthOperation;
+        createUser: DalpAuthOperation;
+        removeUser: DalpAuthOperation;
+        setRole: DalpAuthOperation;
+    };
+    device: Record<string, DalpAuthOperation> & {
+        code: DalpAuthOperation;
+        token: DalpAuthOperation;
+        approve: DalpAuthOperation;
+        deny: DalpAuthOperation;
+    };
+    passkey: Record<string, DalpAuthOperation>;
+    twoFactor: Record<string, DalpAuthOperation> & {
+        enable: DalpAuthOperation;
+        disable: DalpAuthOperation;
+        verifyTotp: DalpAuthOperation;
+        verifyBackupCode: DalpAuthOperation;
+        generateBackupCodes: DalpAuthOperation;
+    };
+    wallet: {
+        pincode: {
+            enable: DalpAuthOperation;
+            disable: DalpAuthOperation;
+            update: DalpAuthOperation;
+            reset: DalpAuthOperation;
+        };
+        twoFactor: {
+            enable: DalpAuthOperation;
+            disable: DalpAuthOperation;
+            verify: DalpAuthOperation;
+        };
+        secretCodes: {
+            generate: DalpAuthOperation;
+            confirm: DalpAuthOperation;
+        };
+        passkey: {
+            register: DalpAuthOperation;
+            complete: DalpAuthOperation;
+            disable: DalpAuthOperation;
+            challenge: DalpAuthOperation;
+            verify: DalpAuthOperation;
+        };
+    };
+    $fetch: (path: string, options?: Record<string, unknown>) => Promise<unknown>;
+    $ERROR_CODES: Record<string, unknown>;
+}
+export declare function createDalpAuthClient(config: DalpAuthClientConfig): DalpAuthClient;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAoBA,OAAO,EAA0B,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAK5E,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IAEZ,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,aAAa;IACrE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAGD,MAAM,MAAM,iBAAiB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO,IAAI,CACjF,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,KACd,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAC1C,KAAK,EAAE,iBAAiB,CAAC;KAC1B,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAC1C,KAAK,EAAE,iBAAiB,CAAC;KAC1B,CAAC;IACF,UAAU,EAAE,iBAAiB,CAAC;IAC9B,YAAY,EAAE,iBAAiB,CAAC;IAChC,aAAa,EAAE,iBAAiB,CAAC;IACjC,mBAAmB,EAAE,iBAAiB,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAC1C,MAAM,EAAE,iBAAiB,CAAC;QAC1B,IAAI,EAAE,iBAAiB,CAAC;QACxB,MAAM,EAAE,iBAAiB,CAAC;KAC3B,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAChD,MAAM,EAAE,iBAAiB,CAAC;QAC1B,IAAI,EAAE,iBAAiB,CAAC;QACxB,SAAS,EAAE,iBAAiB,CAAC;QAC7B,YAAY,EAAE,iBAAiB,CAAC;QAChC,gBAAgB,EAAE,iBAAiB,CAAC;QACpC,WAAW,EAAE,iBAAiB,CAAC;QAC/B,SAAS,EAAE,iBAAiB,CAAC;QAC7B,YAAY,EAAE,iBAAiB,CAAC;KACjC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QACzC,SAAS,EAAE,iBAAiB,CAAC;QAC7B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,OAAO,EAAE,iBAAiB,CAAC;KAC5B,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAC1C,IAAI,EAAE,iBAAiB,CAAC;QACxB,KAAK,EAAE,iBAAiB,CAAC;QACzB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,IAAI,EAAE,iBAAiB,CAAC;KACzB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG;QAC7C,MAAM,EAAE,iBAAiB,CAAC;QAC1B,OAAO,EAAE,iBAAiB,CAAC;QAC3B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,gBAAgB,EAAE,iBAAiB,CAAC;QACpC,mBAAmB,EAAE,iBAAiB,CAAC;KACxC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE;YACP,MAAM,EAAE,iBAAiB,CAAC;YAC1B,OAAO,EAAE,iBAAiB,CAAC;YAC3B,MAAM,EAAE,iBAAiB,CAAC;YAC1B,KAAK,EAAE,iBAAiB,CAAC;SAC1B,CAAC;QACF,SAAS,EAAE;YACT,MAAM,EAAE,iBAAiB,CAAC;YAC1B,OAAO,EAAE,iBAAiB,CAAC;YAC3B,MAAM,EAAE,iBAAiB,CAAC;SAC3B,CAAC;QACF,WAAW,EAAE;YACX,QAAQ,EAAE,iBAAiB,CAAC;YAC5B,OAAO,EAAE,iBAAiB,CAAC;SAC5B,CAAC;QACF,OAAO,EAAE;YACP,QAAQ,EAAE,iBAAiB,CAAC;YAC5B,QAAQ,EAAE,iBAAiB,CAAC;YAC5B,OAAO,EAAE,iBAAiB,CAAC;YAC3B,SAAS,EAAE,iBAAiB,CAAC;YAC7B,MAAM,EAAE,iBAAiB,CAAC;SAC3B,CAAC;KACH,CAAC;IAEF,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CA+CjF"}