@slyxup/core 0.2.3 → 1.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,4 @@
+
+> @slyxup/core@1.0.0 build /home/runner/work/stack/stack/packages/core
+> tsc -p tsconfig.json
+

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 SlyxUp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -20,15 +20,20 @@ const client = new SlyxupClient({
 });
 
 // ── Auth ──
-await client.auth.signUp({ email: 'ada@example.com', password: 'password123', firstName: 'Ada' });
+await client.auth.signUp({ email: 'ada@example.com', password: 'password123', firstName: 'Ada', username: 'ada' });
+// Returns { user, sessionToken, expiresAt } on success, or
+// { code: '2FA_REQUIRED', challengeToken } when the account has 2FA enabled.
 await client.auth.signIn({ email: 'ada@example.com', password: 'password123' });
+// Complete a 2FA challenge:
+await client.auth.completeSignIn({ challengeToken, code: '123456' }); // or { challengeToken, recoveryCode }
 await client.auth.signOut();
 await client.auth.resendVerification('ada@example.com');   // resend email verification
+await client.auth.forgotPassword('ada@example.com');       // send reset email
+await client.auth.resetPassword(token, 'newPassword');     // reset with emailed token
+await client.auth.verifyEmail(token);                      // confirm email with emailed token
 
-// ── Sessions ──
-const { session, user } = await client.sessions.get();
-// session.expiresAt — ISO date; throws UnauthorizedError (401) when signed out
-const { sessions } = await client.sessions.list();
+// ── Sessions ── (list supports pagination)
+const { sessions, total } = await client.sessions.list({ limit: 10, offset: 0 });
 // SlyxupSessionInfo[]: { id, ipAddress, userAgent, expiresAt, createdAt, isCurrent }
 await client.sessions.revoke('session-id');  // revoke one device
 const { revoked } = await client.sessions.revokeOthers();  // sign out everywhere else
@@ -36,9 +41,20 @@ const { revoked } = await client.sessions.revokeOthers();  // sign out everywher
 // ── Password ──
 await client.password.change({ currentPassword, newPassword });
 
+// ── Two-factor (TOTP) ──
+const { secret, provisioningUri, accountName } = await client.twoFactor.setup();
+await client.twoFactor.enable(secret, '123456');  // returns { recoveryCodes: string[] } — save them
+await client.twoFactor.verify('123456');          // { valid: true }
+await client.twoFactor.disable('123456');
+const { enabled } = await client.twoFactor.status();
+
+// ── Connected accounts (OAuth) ──
+const { accounts } = await client.accounts.list();  // [{ id, provider, ... }]
+await client.accounts.unlink(accountId, 'google');
+
 // ── Users ──
-const me = await client.users.me();       // full profile
-await client.users.update({ firstName: 'Ada', lastName: 'Lovelace' });
+const me = await client.users.me();       // full profile (includes username, twoFactorEnabled)
+await client.users.update({ firstName: 'Ada', username: 'ada' });
 await client.users.delete();              // GDPR delete
 ```
 
@@ -72,13 +88,24 @@ try {
 |---|---|---|
 | `auth.signUp(input)` | POST | `/v1/auth/sign-up` |
 | `auth.signIn(input)` | POST | `/v1/auth/sign-in` |
+| `auth.completeSignIn(input)` | POST | `/v1/auth/sign-in/2fa` |
 | `auth.signOut()` | POST | `/v1/auth/sign-out` |
 | `auth.resendVerification(email)` | POST | `/v1/verification/resend` |
+| `auth.forgotPassword(email)` | POST | `/v1/verification/password/forgot` |
+| `auth.resetPassword(token, password)` | POST | `/v1/verification/password/reset` |
+| `auth.verifyEmail(token)` | POST | `/v1/verification/verify` |
 | `sessions.get()` | GET | `/v1/session` |
-| `sessions.list()` | GET | `/v1/sessions` |
+| `sessions.list({ limit, offset })` | GET | `/v1/sessions` |
 | `sessions.revoke(id)` | DELETE | `/v1/sessions/:id` |
 | `sessions.revokeOthers()` | DELETE | `/v1/sessions` |
 | `password.change(input)` | POST | `/v1/user/password` |
+| `twoFactor.setup()` | GET | `/v1/user/2fa/setup` |
+| `twoFactor.status()` | GET | `/v1/user/2fa/status` |
+| `twoFactor.enable(secret, code)` | POST | `/v1/user/2fa/enable` |
+| `twoFactor.verify(code)` | POST | `/v1/user/2fa/verify` |
+| `twoFactor.disable(code)` | POST | `/v1/user/2fa/disable` |
+| `accounts.list()` | GET | `/v1/user/accounts` |
+| `accounts.unlink(id, provider)` | DELETE | `/v1/user/accounts/:id` |
 | `users.me()` | GET | `/v1/user` |
 | `users.update(patch)` | PATCH | `/v1/user` |
 | `users.delete()` | DELETE | `/v1/user` |

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { AuthResponse, ChangePasswordInput, RevokeSessionsResponse, SessionResponse, SessionsResponse, SignInInput, SignUpInput, SlyxupClientOptions, UpdateUserInput, UserResponse } from './types.js';
+import type { AuthResponse, ChangePasswordInput, CompleteSignInInput, ConnectedAccountsResponse, EnableTOTPResponse, RevokeSessionsResponse, SessionResponse, SessionsResponse, SignInInput, SignInResponse, SignUpInput, SlyxupClientOptions, TOTPSetupResponse, TwoFactorStatusResponse, UpdateUserInput, UserResponse } from './types.js';
 /**
  * SlyxUp Core Client.
  *
@@ -15,17 +15,31 @@ export declare class SlyxupClient {
     private _request?;
     readonly auth: {
         signUp: (input: SignUpInput) => Promise<AuthResponse>;
-        signIn: (input: SignInInput) => Promise<AuthResponse>;
+        signIn: (input: SignInInput) => Promise<SignInResponse>;
         signOut: () => Promise<{
             ok: true;
         }>;
         resendVerification: (email: string) => Promise<{
             ok: true;
         }>;
+        forgotPassword: (email: string, projectId?: string) => Promise<{
+            ok: true;
+        }>;
+        resetPassword: (token: string, password: string) => Promise<{
+            ok: true;
+        }>;
+        verifyEmail: (token: string) => Promise<{
+            ok: true;
+        }>;
+        /** Complete a 2FA challenge returned by signIn. */
+        completeSignIn: (input: CompleteSignInInput) => Promise<AuthResponse>;
     };
     readonly sessions: {
         get: () => Promise<SessionResponse>;
-        list: () => Promise<SessionsResponse>;
+        list: (opts?: {
+            limit?: number;
+            offset?: number;
+        }) => Promise<SessionsResponse>;
         revoke: (sessionId: string) => Promise<{
             ok: true;
         }>;
@@ -36,6 +50,24 @@ export declare class SlyxupClient {
             ok: true;
         }>;
     };
+    readonly twoFactor: {
+        setup: () => Promise<TOTPSetupResponse>;
+        status: () => Promise<TwoFactorStatusResponse>;
+        enable: (secret: string, code: string) => Promise<EnableTOTPResponse>;
+        verify: (code: string) => Promise<{
+            ok: boolean;
+            valid: boolean;
+        }>;
+        disable: (code: string) => Promise<{
+            ok: true;
+        }>;
+    };
+    readonly accounts: {
+        list: () => Promise<ConnectedAccountsResponse>;
+        unlink: (accountId: string, provider: 'google' | 'github') => Promise<{
+            ok: true;
+        }>;
+    };
     readonly users: {
         me: () => Promise<UserResponse>;
         update: (input: UpdateUserInput) => Promise<UserResponse>;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EAGnB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAqBpB;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,SAAS,CAAC,CAA2B;IAC7C,OAAO,CAAC,QAAQ,CAAC,CAAsD;IAEvE,QAAQ,CAAC,IAAI,EAAE;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QACrC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KAC9D,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QACrD,YAAY,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;KACrD,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB,MAAM,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KAC/D,CAAC;IAEF,QAAQ,CAAC,KAAK,EAAE;QACd,EAAE,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,EAAE,MAAM,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KACrC,CAAC;IAEF,2EAA2E;IAC3E,QAAQ,IAAI,MAAM,GAAG,SAAS;IAG9B,iFAAiF;IAC3E,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;gBAKlD,OAAO,GAAE,mBAAwB;CAiK9C;AAGD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAGlB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EAEjB,uBAAuB,EACvB,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAqBpB;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,SAAS,CAAC,CAA2B;IAC7C,OAAO,CAAC,QAAQ,CAAC,CAAsD;IAEvE,QAAQ,CAAC,IAAI,EAAE;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QACrC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QAC7D,cAAc,EAAE,CACd,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,KACf,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QAC3B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QAC1E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QACtD,mDAAmD;QACnD,cAAc,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;KACvE,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;YACZ,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;QACrD,YAAY,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;KACrD,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB,MAAM,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KAC/D,CAAC;IAEF,QAAQ,CAAC,SAAS,EAAE;QAClB,KAAK,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KAClD,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB,IAAI,EAAE,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC/C,MAAM,EAAE,CACN,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,KAC1B,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KAC5B,CAAC;IAEF,QAAQ,CAAC,KAAK,EAAE;QACd,EAAE,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,EAAE,MAAM,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC,CAAC;KACrC,CAAC;IAEF,2EAA2E;IAC3E,QAAQ,IAAI,MAAM,GAAG,SAAS;IAG9B,iFAAiF;IAC3E,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;gBAKlD,OAAO,GAAE,mBAAwB;CA+S9C;AAGD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}

package/dist/client.js

@@ -34,6 +34,8 @@ export class SlyxupClient {
     auth;
     sessions;
     password;
+    twoFactor;
+    accounts;
     users;
     /** Get current session token (for custom project APIs that need Bearer) */
     getToken() {
@@ -47,12 +49,32 @@ export class SlyxupClient {
     }
     constructor(options = {}) {
         const jar = createCookieJar();
+        // Persist token in localStorage so refresh keeps session for cross-origin (auth -> billing) and for dashboard project APIs
+        const STORAGE_KEY = 'slyxup_session_token';
         let storedToken;
+        try {
+            if (typeof window !== 'undefined' && window.localStorage) {
+                storedToken = window.localStorage.getItem(STORAGE_KEY) ?? undefined;
+            }
+        }
+        catch { }
+        const persistToken = (t) => {
+            storedToken = t;
+            try {
+                if (typeof window !== 'undefined' && window.localStorage) {
+                    if (t)
+                        window.localStorage.setItem(STORAGE_KEY, t);
+                    else
+                        window.localStorage.removeItem(STORAGE_KEY);
+                }
+            }
+            catch { }
+        };
         this.publishableKey = options.publishableKey;
         this.apiUrl = (options.apiUrl ?? DEFAULT_API_URL).replace(/\/$/, '');
         this._getToken = () => storedToken;
         // _request will be assigned after `request` is defined below
-        const requestInner = async (path, init = {}) => {
+        const requestInner = async (path, init = {}, opts) => {
             let res;
             try {
                 // Build headers: prefer cookie jar (SSR), fall back to stored Bearer token (browser cross-origin)
@@ -87,6 +109,8 @@ export class SlyxupClient {
                 .json()
                 .catch(() => ({ ok: false, error: 'Invalid response' })));
             if (!res.ok) {
+                if (opts?.captureError)
+                    return data;
                 if (res.status === 401)
                     throw new UnauthorizedError('error' in data ? String(data.error) : undefined);
                 if (res.status === 429)
@@ -97,30 +121,45 @@ export class SlyxupClient {
             }
             return data;
         };
-        const post = (path, body) => requestInner(path, {
+        const post = (path, body, opts) => requestInner(path, {
             method: 'POST',
             body: body === undefined ? undefined : JSON.stringify(body),
-        });
+        }, opts);
         this.auth = {
             signUp: async (input) => {
                 const res = await post('/v1/auth/sign-up', input);
                 if (!('user' in res))
                     throw new SlyxupError(res.error, 400, 'api_error');
                 if (res.sessionToken)
-                    storedToken = res.sessionToken;
+                    persistToken(res.sessionToken);
                 return res;
             },
             signIn: async (input) => {
-                const res = await post('/v1/auth/sign-in', input);
+                // The server may answer 403 with code 2FA_REQUIRED — we must surface
+                // the challenge back to the caller instead of throwing a generic error.
+                const res = await post('/v1/auth/sign-in', input, {
+                    captureError: true,
+                });
+                if ('challengeToken' in res) {
+                    return res;
+                }
                 if (!('user' in res))
-                    throw new SlyxupError(res.error, 401, 'api_error');
+                    throw new UnauthorizedError(res.error ?? 'Sign in failed');
                 if (res.sessionToken)
-                    storedToken = res.sessionToken;
+                    persistToken(res.sessionToken);
+                return res;
+            },
+            completeSignIn: async (input) => {
+                const res = await post('/v1/auth/sign-in/2fa', input);
+                if (!('user' in res))
+                    throw new UnauthorizedError(res.error);
+                if (res.sessionToken)
+                    persistToken(res.sessionToken);
                 return res;
             },
             signOut: async () => {
                 const res = await post('/v1/auth/sign-out');
-                storedToken = undefined;
+                persistToken(undefined);
                 jar.clear();
                 return res;
             },
@@ -132,6 +171,32 @@ export class SlyxupClient {
                     throw new SlyxupError(res.error, 400, 'api_error');
                 return res;
             },
+            forgotPassword: async (email, projectId) => {
+                const res = await post('/v1/verification/password/forgot', {
+                    email,
+                    projectId,
+                });
+                if (!res.ok)
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            resetPassword: async (token, password) => {
+                const res = await post('/v1/verification/password/reset', {
+                    token,
+                    password,
+                });
+                if (!res.ok)
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            verifyEmail: async (token) => {
+                const res = await post('/v1/verification/verify', {
+                    token,
+                });
+                if (!res.ok)
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
         };
         this.sessions = {
             get: async () => {
@@ -140,8 +205,14 @@ export class SlyxupClient {
                     throw new UnauthorizedError(res.error);
                 return res;
             },
-            list: async () => {
-                const res = await requestInner('/v1/sessions');
+            list: async (opts) => {
+                const params = new URLSearchParams();
+                if (opts?.limit !== undefined)
+                    params.set('limit', String(opts.limit));
+                if (opts?.offset !== undefined)
+                    params.set('offset', String(opts.offset));
+                const qs = params.toString();
+                const res = await requestInner(`/v1/sessions${qs ? `?${qs}` : ''}`);
                 if (!('sessions' in res))
                     throw new SlyxupError(res.error, 400, 'api_error');
                 return res;
@@ -169,6 +240,50 @@ export class SlyxupClient {
                 return res;
             },
         };
+        this.twoFactor = {
+            setup: async () => {
+                const res = await requestInner('/v1/user/2fa/setup');
+                if (!('secret' in res))
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            status: async () => {
+                const res = await requestInner('/v1/user/2fa/status');
+                return res;
+            },
+            enable: async (secret, code) => {
+                const res = await post('/v1/user/2fa/enable', { secret, code }, { captureError: true });
+                if (!('recoveryCodes' in res))
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            verify: async (code) => {
+                const res = await post('/v1/user/2fa/verify', { code }, { captureError: true });
+                if (!('valid' in res))
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            disable: async (code) => {
+                const res = await post('/v1/user/2fa/disable', { code });
+                if (!res.ok)
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+        };
+        this.accounts = {
+            list: async () => {
+                const res = await requestInner('/v1/user/accounts');
+                if (!('accounts' in res))
+                    throw new SlyxupError(res.error, 400, 'api_error');
+                return res;
+            },
+            unlink: async (accountId, provider) => {
+                const res = await requestInner(`/v1/user/accounts/${accountId}?provider=${encodeURIComponent(provider)}`, {
+                    method: 'DELETE',
+                });
+                return res;
+            },
+        };
         this.users = {
             me: async () => {
                 const res = await requestInner('/v1/user');

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAgBrB,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAErD,0FAA0F;AAC1F,SAAS,eAAe;IACtB,IAAI,GAAuB,CAAC;IAC5B,OAAO;QACL,OAAO,CAAC,GAAa;YACnB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,SAAS;gBAAE,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,MAAM;YACJ,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,CAAC;QACD,KAAK;YACH,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACd,cAAc,CAAU;IACxB,MAAM,CAAS;IAChB,SAAS,CAA4B;IACrC,QAAQ,CAAuD;IAE9D,IAAI,CAKX;IAEO,QAAQ,CAKf;IAEO,QAAQ,CAEf;IAEO,KAAK,CAIZ;IAEF,2EAA2E;IAC3E,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,iFAAiF;IACjF,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,IAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,UAA+B,EAAE;QAC3C,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC;QACnC,6DAA6D;QAE7D,MAAM,YAAY,GAAG,KAAK,EACxB,IAAY,EACZ,OAAwC,EAAE,EACtB,EAAE;YACtB,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,kGAAkG;gBAClG,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,WAAW,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;gBACtD,CAAC;gBACD,8EAA8E;gBAC9E,kFAAkF;gBAClF,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;oBACrE,WAAW,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;gBACzD,CAAC;gBAED,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;oBACzC,GAAG,IAAI;oBACP,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,WAAW;wBACd,GAAG,IAAI,CAAC,OAAO;qBAChB;oBACD,WAAW,EAAE,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,EAAE,CAAC;YAC3B,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG;iBACpB,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAW,CAAC;YAEtE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBACpB,MAAM,IAAI,iBAAiB,CACzB,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACjD,CAAC;gBACJ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,cAAc,EAAE,CAAC;gBACnD,MAAM,IAAI,WAAW,CACnB,OAAO,IAAI,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;oBACpB,CAAC,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,EACpC,GAAG,CAAC,MAAM,EACV,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,OAAO,IAAiB,CAAC;QAC3B,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAI,IAAY,EAAE,IAAc,EAAE,EAAE,CAC/C,YAAY,CAAI,IAAI,EAAE;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;QAEL,IAAI,CAAC,IAAI,GAAG;YACV,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,kBAAkB,EAAE,KAAK,CAAC,CAAC;gBAChE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,IAAI,GAAG,CAAC,YAAY;oBAAE,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,kBAAkB,EAAE,KAAK,CAAC,CAAC;gBAChE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,IAAI,GAAG,CAAC,YAAY;oBAAE,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,mBAAmB,CAAC,CAAC;gBAC1D,WAAW,GAAG,SAAS,CAAC;gBACxB,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,yBAAyB,EAAE;oBAC9D,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,GAAG,GAAG,MAAM,YAAY,CAAkB,aAAa,CAAC,CAAC;gBAC/D,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChE,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,GAAG,GAAG,MAAM,YAAY,CAAmB,cAAc,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;oBACtB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE;gBAClC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,gBAAgB,SAAS,EAAE,EAAE;oBACxE,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,YAAY,EAAE,KAAK,IAAI,EAAE;gBACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAyB,cAAc,EAAE;oBACrE,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;oBACrB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,mBAAmB,EAAE,KAAK,CAAC,CAAC;gBACjE,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG;YACX,EAAE,EAAE,KAAK,IAAI,EAAE;gBACb,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,EAAE;oBACvD,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,EAAE;oBACvD,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,YAA8E,CAAC;IACjG,CAAC;CACF;AAED,yDAAyD;AACzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,yBAAyB"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAuBrB,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAErD,0FAA0F;AAC1F,SAAS,eAAe;IACtB,IAAI,GAAuB,CAAC;IAC5B,OAAO;QACL,OAAO,CAAC,GAAa;YACnB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,SAAS;gBAAE,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,MAAM;YACJ,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,CAAC;QACD,KAAK;YACH,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACd,cAAc,CAAU;IACxB,MAAM,CAAS;IAChB,SAAS,CAA4B;IACrC,QAAQ,CAAuD;IAE9D,IAAI,CAaX;IAEO,QAAQ,CAQf;IAEO,QAAQ,CAEf;IAEO,SAAS,CAMhB;IAEO,QAAQ,CAMf;IAEO,KAAK,CAIZ;IAEF,2EAA2E;IAC3E,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,iFAAiF;IACjF,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,IAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,UAA+B,EAAE;QAC3C,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,2HAA2H;QAC3H,MAAM,WAAW,GAAG,sBAAsB,CAAC;QAC3C,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzD,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,YAAY,GAAG,CAAC,CAAqB,EAAE,EAAE;YAC7C,WAAW,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzD,IAAI,CAAC;wBAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;;wBAC9C,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC;QACnC,6DAA6D;QAE7D,MAAM,YAAY,GAAG,KAAK,EACxB,IAAY,EACZ,OAAwC,EAAE,EAC1C,IAAiC,EACb,EAAE;YACtB,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,kGAAkG;gBAClG,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,WAAW,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;gBACtD,CAAC;gBACD,8EAA8E;gBAC9E,kFAAkF;gBAClF,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;oBACrE,WAAW,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;gBACzD,CAAC;gBAED,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;oBACzC,GAAG,IAAI;oBACP,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,WAAW;wBACd,GAAG,IAAI,CAAC,OAAO;qBAChB;oBACD,WAAW,EAAE,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,EAAE,CAAC;YAC3B,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG;iBACpB,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAW,CAAC;YAEtE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,IAAI,EAAE,YAAY;oBAAE,OAAO,IAAiB,CAAC;gBACjD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBACpB,MAAM,IAAI,iBAAiB,CACzB,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACjD,CAAC;gBACJ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,cAAc,EAAE,CAAC;gBACnD,MAAM,IAAI,WAAW,CACnB,OAAO,IAAI,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;oBACpB,CAAC,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,EACpC,GAAG,CAAC,MAAM,EACV,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,OAAO,IAAiB,CAAC;QAC3B,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,IAAc,EACd,IAAiC,EACjC,EAAE,CACF,YAAY,CACV,IAAI,EACJ;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,EACD,IAAI,CACL,CAAC;QAEJ,IAAI,CAAC,IAAI,GAAG;YACV,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,kBAAkB,EAAE,KAAK,CAAC,CAAC;gBAChE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,IAAI,GAAG,CAAC,YAAY;oBAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,qEAAqE;gBACrE,wEAAwE;gBACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAiB,kBAAkB,EAAE,KAAK,EAAE;oBAChE,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;oBAC5B,OAAO,GAAgC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,iBAAiB,CACxB,GAA0B,CAAC,KAAK,IAAI,gBAAgB,CACtD,CAAC;gBACJ,IAAI,GAAG,CAAC,YAAY;oBAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,sBAAsB,EAAE,KAAK,CAAC,CAAC;gBACpE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,GAAG,CAAC,YAAY;oBAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,mBAAmB,CAAC,CAAC;gBAC1D,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,yBAAyB,EAAE;oBAC9D,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,cAAc,EAAE,KAAK,EAAE,KAAa,EAAE,SAAkB,EAAE,EAAE;gBAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,kCAAkC,EAClC;oBACE,KAAK;oBACL,SAAS;iBACV,CACF,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,aAAa,EAAE,KAAK,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;gBACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,iCAAiC,EACjC;oBACE,KAAK;oBACL,QAAQ;iBACT,CACF,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,WAAW,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,yBAAyB,EAAE;oBAC9D,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,GAAG,GAAG,MAAM,YAAY,CAAkB,aAAa,CAAC,CAAC;gBAC/D,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChE,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,IAA0C,EAAE,EAAE;gBACzD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvE,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS;oBAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC;gBACF,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;oBACtB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE;gBAClC,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,gBAAgB,SAAS,EAAE,EAC3B;oBACE,MAAM,EAAE,QAAQ;iBACjB,CACF,CAAC;gBACF,OAAO,GAAmB,CAAC;YAC7B,CAAC;YACD,YAAY,EAAE,KAAK,IAAI,EAAE;gBACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAyB,cAAc,EAAE;oBACrE,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;oBACrB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,mBAAmB,EAAE,KAAK,CAAC,CAAC;gBACjE,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG;YACf,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAoB,oBAAoB,CAAC,CAAC;gBACxE,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;oBACpB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,qBAAqB,CACtB,CAAC;gBACF,OAAO,GAA8B,CAAC;YACxC,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,qBAAqB,EACrB,EAAE,MAAM,EAAE,IAAI,EAAE,EAChB,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;gBACF,IAAI,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;oBAC3B,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,qBAAqB,EACrB,EAAE,IAAI,EAAE,EACR,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;gBACF,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;oBACnB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAsC,CAAC;YAChD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAe,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,GAAG,GACP,MAAM,YAAY,CAA4B,mBAAmB,CAAC,CAAC;gBACrE,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;oBACtB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;gBACpC,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,qBAAqB,SAAS,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACzE;oBACE,MAAM,EAAE,QAAQ;iBACjB,CACF,CAAC;gBACF,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG;YACX,EAAE,EAAE,KAAK,IAAI,EAAE;gBACb,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,EAAE;oBACvD,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACrD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAe,UAAU,EAAE;oBACvD,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,OAAO,GAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,YAGD,CAAC;IAClB,CAAC;CACF;AAED,yDAAyD;AACzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,yBAAyB"}

package/dist/types.d.ts

@@ -3,9 +3,11 @@ export interface SlyxupUser {
     projectId: string | null;
     email: string;
     emailVerified: boolean;
+    username: string | null;
     firstName: string | null;
     lastName: string | null;
     avatarUrl: string | null;
+    twoFactorEnabled: boolean;
     preferences: Record<string, unknown> | null;
     createdAt: string;
     updatedAt: string;
@@ -16,18 +18,21 @@ export interface SlyxupSession {
     expiresAt: string;
 }
 export interface SignInInput {
-    email: string;
+    email?: string;
+    username?: string;
     password: string;
     projectId?: string;
 }
-export interface SignUpInput extends SignInInput {
+export interface SignUpInput extends Omit<SignInInput, 'username'> {
     firstName?: string;
     lastName?: string;
+    username?: string;
 }
 export interface UpdateUserInput {
     firstName?: string;
     lastName?: string;
     avatarUrl?: string;
+    username?: string | null;
     preferences?: Record<string, unknown>;
 }
 export interface SessionResponse {
@@ -51,6 +56,9 @@ export interface SlyxupSessionInfo {
 export interface SessionsResponse {
     ok: true;
     sessions: SlyxupSessionInfo[];
+    total: number;
+    limit: number;
+    offset: number;
 }
 export interface RevokeSessionsResponse {
     ok: true;
@@ -66,6 +74,44 @@ export interface AuthResponse {
     sessionToken?: string;
     expiresAt?: string;
 }
+/** Returned by signIn when the account has 2FA enabled. */
+export interface TwoFactorRequiredResponse {
+    ok: false;
+    code: '2FA_REQUIRED';
+    challengeToken: string;
+}
+/** Union returned by client.auth.signIn. */
+export type SignInResponse = AuthResponse | TwoFactorRequiredResponse;
+export interface TOTPSetupResponse {
+    ok: true;
+    secret: string;
+    provisioningUri: string;
+    accountName: string;
+}
+export interface EnableTOTPResponse {
+    ok: true;
+    recoveryCodes: string[];
+}
+export interface TwoFactorStatusResponse {
+    ok: boolean;
+    enabled: boolean;
+}
+export interface ConnectedAccount {
+    id: string;
+    provider: 'google' | 'github';
+    providerAccountId: string;
+    createdAt: string;
+}
+export interface ConnectedAccountsResponse {
+    ok: true;
+    accounts: ConnectedAccount[];
+}
+/** Input for completing a 2FA sign-in challenge. */
+export interface CompleteSignInInput {
+    challengeToken: string;
+    code?: string;
+    recoveryCode?: string;
+}
 export interface ErrorResponse {
     ok: false;
     error: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;AAE1C,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,2DAA2D;AAC3D,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,4CAA4C;AAC5C,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,yBAAyB,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;AAE1C,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/package.json

@@ -1,15 +1,10 @@
 {
   "name": "@slyxup/core",
-  "version": "0.2.3",
+  "version": "1.0.0",
   "description": "@slyxup/core — SlyxUp SDK",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run --passWithNoTests"
-  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/slyxup/stack.git",
@@ -26,5 +21,10 @@
   },
   "devDependencies": {
     "vitest": "^4.1.11"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests"
   }
-}
+}

package/src/client.ts

@@ -7,14 +7,21 @@ import {
 import type {
   AuthResponse,
   ChangePasswordInput,
+  CompleteSignInInput,
+  ConnectedAccountsResponse,
+  EnableTOTPResponse,
   ErrorResponse,
   Result,
   RevokeSessionsResponse,
   SessionResponse,
   SessionsResponse,
   SignInInput,
+  SignInResponse,
   SignUpInput,
   SlyxupClientOptions,
+  TOTPSetupResponse,
+  TwoFactorRequiredResponse,
+  TwoFactorStatusResponse,
   UpdateUserInput,
   UserResponse,
 } from './types.js';
@@ -55,14 +62,25 @@ export class SlyxupClient {
 
   readonly auth: {
     signUp: (input: SignUpInput) => Promise<AuthResponse>;
-    signIn: (input: SignInInput) => Promise<AuthResponse>;
+    signIn: (input: SignInInput) => Promise<SignInResponse>;
     signOut: () => Promise<{ ok: true }>;
     resendVerification: (email: string) => Promise<{ ok: true }>;
+    forgotPassword: (
+      email: string,
+      projectId?: string
+    ) => Promise<{ ok: true }>;
+    resetPassword: (token: string, password: string) => Promise<{ ok: true }>;
+    verifyEmail: (token: string) => Promise<{ ok: true }>;
+    /** Complete a 2FA challenge returned by signIn. */
+    completeSignIn: (input: CompleteSignInInput) => Promise<AuthResponse>;
   };
 
   readonly sessions: {
     get: () => Promise<SessionResponse>;
-    list: () => Promise<SessionsResponse>;
+    list: (opts?: {
+      limit?: number;
+      offset?: number;
+    }) => Promise<SessionsResponse>;
     revoke: (sessionId: string) => Promise<{ ok: true }>;
     revokeOthers: () => Promise<RevokeSessionsResponse>;
   };
@@ -71,6 +89,22 @@ export class SlyxupClient {
     change: (input: ChangePasswordInput) => Promise<{ ok: true }>;
   };
 
+  readonly twoFactor: {
+    setup: () => Promise<TOTPSetupResponse>;
+    status: () => Promise<TwoFactorStatusResponse>;
+    enable: (secret: string, code: string) => Promise<EnableTOTPResponse>;
+    verify: (code: string) => Promise<{ ok: boolean; valid: boolean }>;
+    disable: (code: string) => Promise<{ ok: true }>;
+  };
+
+  readonly accounts: {
+    list: () => Promise<ConnectedAccountsResponse>;
+    unlink: (
+      accountId: string,
+      provider: 'google' | 'github'
+    ) => Promise<{ ok: true }>;
+  };
+
   readonly users: {
     me: () => Promise<UserResponse>;
     update: (input: UpdateUserInput) => Promise<UserResponse>;
@@ -89,7 +123,23 @@ export class SlyxupClient {
 
   constructor(options: SlyxupClientOptions = {}) {
     const jar = createCookieJar();
+    // Persist token in localStorage so refresh keeps session for cross-origin (auth -> billing) and for dashboard project APIs
+    const STORAGE_KEY = 'slyxup_session_token';
     let storedToken: string | undefined;
+    try {
+      if (typeof window !== 'undefined' && window.localStorage) {
+        storedToken = window.localStorage.getItem(STORAGE_KEY) ?? undefined;
+      }
+    } catch {}
+    const persistToken = (t: string | undefined) => {
+      storedToken = t;
+      try {
+        if (typeof window !== 'undefined' && window.localStorage) {
+          if (t) window.localStorage.setItem(STORAGE_KEY, t);
+          else window.localStorage.removeItem(STORAGE_KEY);
+        }
+      } catch {}
+    };
     this.publishableKey = options.publishableKey;
     this.apiUrl = (options.apiUrl ?? DEFAULT_API_URL).replace(/\/$/, '');
     this._getToken = () => storedToken;
@@ -97,7 +147,8 @@ export class SlyxupClient {
 
     const requestInner = async <T>(
       path: string,
-      init: RequestInit & { body?: string } = {}
+      init: RequestInit & { body?: string } = {},
+      opts?: { captureError?: boolean }
     ): Promise<Result<T>> => {
       let res: Response;
       try {
@@ -134,6 +185,7 @@ export class SlyxupClient {
         .catch(() => ({ ok: false, error: 'Invalid response' }))) as object;
 
       if (!res.ok) {
+        if (opts?.captureError) return data as Result<T>;
         if (res.status === 401)
           throw new UnauthorizedError(
             'error' in data ? String(data.error) : undefined
@@ -151,30 +203,53 @@ export class SlyxupClient {
       return data as Result<T>;
     };
 
-    const post = <T>(path: string, body?: unknown) =>
-      requestInner<T>(path, {
-        method: 'POST',
-        body: body === undefined ? undefined : JSON.stringify(body),
-      });
+    const post = <T>(
+      path: string,
+      body?: unknown,
+      opts?: { captureError?: boolean }
+    ) =>
+      requestInner<T>(
+        path,
+        {
+          method: 'POST',
+          body: body === undefined ? undefined : JSON.stringify(body),
+        },
+        opts
+      );
 
     this.auth = {
       signUp: async (input) => {
         const res = await post<AuthResponse>('/v1/auth/sign-up', input);
         if (!('user' in res))
           throw new SlyxupError(res.error, 400, 'api_error');
-        if (res.sessionToken) storedToken = res.sessionToken;
+        if (res.sessionToken) persistToken(res.sessionToken);
         return res;
       },
       signIn: async (input) => {
-        const res = await post<AuthResponse>('/v1/auth/sign-in', input);
+        // The server may answer 403 with code 2FA_REQUIRED — we must surface
+        // the challenge back to the caller instead of throwing a generic error.
+        const res = await post<SignInResponse>('/v1/auth/sign-in', input, {
+          captureError: true,
+        });
+        if ('challengeToken' in res) {
+          return res as TwoFactorRequiredResponse;
+        }
         if (!('user' in res))
-          throw new SlyxupError(res.error, 401, 'api_error');
-        if (res.sessionToken) storedToken = res.sessionToken;
+          throw new UnauthorizedError(
+            (res as { error?: string }).error ?? 'Sign in failed'
+          );
+        if (res.sessionToken) persistToken(res.sessionToken);
+        return res;
+      },
+      completeSignIn: async (input) => {
+        const res = await post<AuthResponse>('/v1/auth/sign-in/2fa', input);
+        if (!('user' in res)) throw new UnauthorizedError(res.error);
+        if (res.sessionToken) persistToken(res.sessionToken);
         return res;
       },
       signOut: async () => {
         const res = await post<{ ok: true }>('/v1/auth/sign-out');
-        storedToken = undefined;
+        persistToken(undefined);
         jar.clear();
         return res as { ok: true };
       },
@@ -185,6 +260,35 @@ export class SlyxupClient {
         if (!res.ok) throw new SlyxupError(res.error, 400, 'api_error');
         return res as { ok: true };
       },
+      forgotPassword: async (email: string, projectId?: string) => {
+        const res = await post<{ ok: true }>(
+          '/v1/verification/password/forgot',
+          {
+            email,
+            projectId,
+          }
+        );
+        if (!res.ok) throw new SlyxupError(res.error, 400, 'api_error');
+        return res as { ok: true };
+      },
+      resetPassword: async (token: string, password: string) => {
+        const res = await post<{ ok: true }>(
+          '/v1/verification/password/reset',
+          {
+            token,
+            password,
+          }
+        );
+        if (!res.ok) throw new SlyxupError(res.error, 400, 'api_error');
+        return res as { ok: true };
+      },
+      verifyEmail: async (token: string) => {
+        const res = await post<{ ok: true }>('/v1/verification/verify', {
+          token,
+        });
+        if (!res.ok) throw new SlyxupError(res.error, 400, 'api_error');
+        return res as { ok: true };
+      },
     };
 
     this.sessions = {
@@ -193,16 +297,26 @@ export class SlyxupClient {
         if (!('session' in res)) throw new UnauthorizedError(res.error);
         return res;
       },
-      list: async () => {
-        const res = await requestInner<SessionsResponse>('/v1/sessions');
+      list: async (opts?: { limit?: number; offset?: number }) => {
+        const params = new URLSearchParams();
+        if (opts?.limit !== undefined) params.set('limit', String(opts.limit));
+        if (opts?.offset !== undefined)
+          params.set('offset', String(opts.offset));
+        const qs = params.toString();
+        const res = await requestInner<SessionsResponse>(
+          `/v1/sessions${qs ? `?${qs}` : ''}`
+        );
         if (!('sessions' in res))
           throw new SlyxupError(res.error, 400, 'api_error');
         return res;
       },
       revoke: async (sessionId: string) => {
-        const res = await requestInner<{ ok: true }>(`/v1/sessions/${sessionId}`, {
-          method: 'DELETE',
-        });
+        const res = await requestInner<{ ok: true }>(
+          `/v1/sessions/${sessionId}`,
+          {
+            method: 'DELETE',
+          }
+        );
         return res as { ok: true };
       },
       revokeOthers: async () => {
@@ -223,6 +337,65 @@ export class SlyxupClient {
       },
     };
 
+    this.twoFactor = {
+      setup: async () => {
+        const res = await requestInner<TOTPSetupResponse>('/v1/user/2fa/setup');
+        if (!('secret' in res))
+          throw new SlyxupError(res.error, 400, 'api_error');
+        return res;
+      },
+      status: async () => {
+        const res = await requestInner<TwoFactorStatusResponse>(
+          '/v1/user/2fa/status'
+        );
+        return res as TwoFactorStatusResponse;
+      },
+      enable: async (secret, code) => {
+        const res = await post<EnableTOTPResponse>(
+          '/v1/user/2fa/enable',
+          { secret, code },
+          { captureError: true }
+        );
+        if (!('recoveryCodes' in res))
+          throw new SlyxupError(res.error, 400, 'api_error');
+        return res;
+      },
+      verify: async (code) => {
+        const res = await post<{ ok: boolean; valid: boolean }>(
+          '/v1/user/2fa/verify',
+          { code },
+          { captureError: true }
+        );
+        if (!('valid' in res))
+          throw new SlyxupError(res.error, 400, 'api_error');
+        return res as { ok: boolean; valid: boolean };
+      },
+      disable: async (code) => {
+        const res = await post<{ ok: true }>('/v1/user/2fa/disable', { code });
+        if (!res.ok) throw new SlyxupError(res.error, 400, 'api_error');
+        return res as { ok: true };
+      },
+    };
+
+    this.accounts = {
+      list: async () => {
+        const res =
+          await requestInner<ConnectedAccountsResponse>('/v1/user/accounts');
+        if (!('accounts' in res))
+          throw new SlyxupError(res.error, 400, 'api_error');
+        return res;
+      },
+      unlink: async (accountId, provider) => {
+        const res = await requestInner<{ ok: true }>(
+          `/v1/user/accounts/${accountId}?provider=${encodeURIComponent(provider)}`,
+          {
+            method: 'DELETE',
+          }
+        );
+        return res as { ok: true };
+      },
+    };
+
     this.users = {
       me: async () => {
         const res = await requestInner<UserResponse>('/v1/user');
@@ -246,7 +419,10 @@ export class SlyxupClient {
       },
     };
 
-    this._request = requestInner as unknown as <T>(path: string, init?: RequestInit) => Promise<T>;
+    this._request = requestInner as unknown as <T>(
+      path: string,
+      init?: RequestInit
+    ) => Promise<T>;
   }
 }
 

package/src/types.ts

@@ -5,9 +5,11 @@ export interface SlyxupUser {
   projectId: string | null;
   email: string;
   emailVerified: boolean;
+  username: string | null;
   firstName: string | null;
   lastName: string | null;
   avatarUrl: string | null;
+  twoFactorEnabled: boolean;
   preferences: Record<string, unknown> | null;
   createdAt: string;
   updatedAt: string;
@@ -20,20 +22,23 @@ export interface SlyxupSession {
 }
 
 export interface SignInInput {
-  email: string;
+  email?: string;
+  username?: string;
   password: string;
   projectId?: string;
 }
 
-export interface SignUpInput extends SignInInput {
+export interface SignUpInput extends Omit<SignInInput, 'username'> {
   firstName?: string;
   lastName?: string;
+  username?: string;
 }
 
 export interface UpdateUserInput {
   firstName?: string;
   lastName?: string;
   avatarUrl?: string;
+  username?: string | null;
   preferences?: Record<string, unknown>;
 }
 
@@ -61,6 +66,9 @@ export interface SlyxupSessionInfo {
 export interface SessionsResponse {
   ok: true;
   sessions: SlyxupSessionInfo[];
+  total: number;
+  limit: number;
+  offset: number;
 }
 
 export interface RevokeSessionsResponse {
@@ -80,6 +88,52 @@ export interface AuthResponse {
   expiresAt?: string;
 }
 
+/** Returned by signIn when the account has 2FA enabled. */
+export interface TwoFactorRequiredResponse {
+  ok: false;
+  code: '2FA_REQUIRED';
+  challengeToken: string;
+}
+
+/** Union returned by client.auth.signIn. */
+export type SignInResponse = AuthResponse | TwoFactorRequiredResponse;
+
+export interface TOTPSetupResponse {
+  ok: true;
+  secret: string;
+  provisioningUri: string;
+  accountName: string;
+}
+
+export interface EnableTOTPResponse {
+  ok: true;
+  recoveryCodes: string[];
+}
+
+export interface TwoFactorStatusResponse {
+  ok: boolean;
+  enabled: boolean;
+}
+
+export interface ConnectedAccount {
+  id: string;
+  provider: 'google' | 'github';
+  providerAccountId: string;
+  createdAt: string;
+}
+
+export interface ConnectedAccountsResponse {
+  ok: true;
+  accounts: ConnectedAccount[];
+}
+
+/** Input for completing a 2FA sign-in challenge. */
+export interface CompleteSignInInput {
+  challengeToken: string;
+  code?: string;
+  recoveryCode?: string;
+}
+
 export interface ErrorResponse {
   ok: false;
   error: string;