@softr/sdk 0.0.92-emailotc.0 → 0.0.92

package/dist/app-identity.js

@@ -0,0 +1,25 @@
+import { createMiddleware } from "@tanstack/react-start";
+
+//#region src/app-identity.ts
+/**
+* Tells support which Softr app answered, in an `x-softr-app-id` response
+* header.
+*/
+function appIdentityMiddleware() {
+	return createMiddleware({ type: "request" }).server(async ({ next }) => {
+		const result = await next();
+		const applicationId = process.env.SOFTR_APPLICATION_ID;
+		if (!applicationId) return result;
+		try {
+			result.response.headers.set("x-softr-app-id", applicationId);
+			return result;
+		} catch {
+			const response = new Response(result.response.body, result.response);
+			response.headers.set("x-softr-app-id", applicationId);
+			return response;
+		}
+	});
+}
+
+//#endregion
+export { appIdentityMiddleware };

package/dist/auth/isomorphic.d.ts

@@ -22,7 +22,7 @@ import * as _tanstack_react_start0 from "@tanstack/react-start";
  *   requestMiddleware: [softrAuthMiddleware()],
  * }))
  */
-declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
+declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
   user: User | null;
   permissions: Permissions;
   formatting: Formatting;

package/dist/auth/isomorphic.js

@@ -10,6 +10,7 @@ import { bootErrorMiddleware } from "../boot-error.js";
 import { pwaMiddleware } from "../pwa.js";
 import { faviconMiddleware } from "../favicon.js";
 import { embeddingMiddleware } from "../embedding.js";
+import { appIdentityMiddleware } from "../app-identity.js";
 import { createContext, useContext } from "react";
 import { createMiddleware, createServerFn, getGlobalStartContext } from "@tanstack/react-start";
 import { getRequestHeader } from "@tanstack/react-start/server";
@@ -34,6 +35,7 @@ import { jsx } from "react/jsx-runtime";
 function softrAuthMiddleware() {
 	return createMiddleware({ type: "request" }).middleware([
 		embeddingMiddleware(),
+		appIdentityMiddleware(),
 		bootErrorMiddleware(),
 		pwaMiddleware(),
 		faviconMiddleware()

package/dist/auth/methods/password.d.ts

@@ -8,8 +8,7 @@ import { AuthError, Result } from "./utils.js";
  *
  * A `signedIn` result means the visitor is signed in. An app that also asks for
  * an authenticator app answers `authenticatorRequired` instead, naming the step
- * to send them to next. An app that also asks for an emailed code answers
- * `emailCodeRequired`; `verifyEmailCode` finishes it.
+ * to send them to next.
  */
 declare function signIn(credentials: {
   email: string;
@@ -25,8 +24,6 @@ declare function signIn(credentials: {
    * `setupOptional`: same, except they may skip it instead.
    */
   step: "verify" | "setup" | "setupOptional";
-} | {
-  status: "emailCodeRequired";
 }, AuthError>>;
 /**
  * Signs the visitor out.

package/dist/auth/methods/password.js

@@ -11,8 +11,7 @@ import { authError } from "./utils.js";
 *
 * A `signedIn` result means the visitor is signed in. An app that also asks for
 * an authenticator app answers `authenticatorRequired` instead, naming the step
-* to send them to next. An app that also asks for an emailed code answers
-* `emailCodeRequired`; `verifyEmailCode` finishes it.
+* to send them to next.
 */
 async function signIn(credentials) {
 	const result = await makePlatform(sessionConfig().applicationId).tokens(credentials);
@@ -26,10 +25,6 @@ async function signIn(credentials) {
 		const { mfa } = result.data;
 		assert(mfa, "Expected a challenge from sign-in, but got none");
 		writeCookies([makePendingAuthCookie(mfa.challengeToken)]);
-		if (mfa.action === "EMAIL_CODE_REQUIRED") return {
-			success: true,
-			data: { status: "emailCodeRequired" }
-		};
 		return {
 			success: true,
 			data: {

package/dist/auth/platform.js

@@ -71,27 +71,6 @@ function makePlatform(applicationId) {
 		tokens: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens${withAttributes}`, {
 			method: "POST",
 			json: credentials
-		}, z.object({
-			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
-			session: z.object({
-				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
-			}).nullish(),
-			mfa: z.object({
-				action: z.enum([
-					"VERIFICATION_REQUIRED",
-					"SETUP_REQUIRED",
-					"SETUP_OPTIONAL",
-					"EMAIL_CODE_REQUIRED"
-				]),
-				challengeToken: z.string()
-			}).nullish()
-		})),
-		emailCodeVerify: (token, code) => request(`/v1/vibe/applications/${applicationId}/users/tokens/email-code/verify${withAttributes}`, {
-			method: "POST",
-			token,
-			json: { code }
 		}, z.object({
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
@@ -108,10 +87,6 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		emailCodeResend: (token) => request(`/v1/vibe/applications/${applicationId}/users/tokens/email-code/resend`, {
-			method: "POST",
-			token
-		}, z.null()),
 		sendSignInCode: (email) => request(`/v1/vibe/applications/${applicationId}/users/tokens/send-code`, {
 			method: "POST",
 			json: { email }

package/dist/auth/server.d.ts

@@ -1,6 +1,5 @@
 import { confirmAuthenticatorSetup, removeAuthenticator, resetAuthenticator, sendAuthenticatorResetCode, skipAuthenticatorSetup, startAuthenticatorSetup, verifyAuthenticator } from "./methods/authenticator.js";
 import { sendSignInCode, signInWithCode } from "./methods/code.js";
-import { resendEmailCode, verifyEmailCode } from "./methods/emailCode2fa.js";
 import { signInWithMagicLink } from "./methods/magicLink.js";
 import { signIn, signOut } from "./methods/password.js";
 import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./methods/passwordLink.js";
@@ -35,8 +34,6 @@ declare const auth: {
   sendAuthenticatorResetCode: typeof sendAuthenticatorResetCode;
   resetAuthenticator: typeof resetAuthenticator;
   removeAuthenticator: typeof removeAuthenticator;
-  verifyEmailCode: typeof verifyEmailCode;
-  resendEmailCode: typeof resendEmailCode;
   settings: typeof settings;
   updateProfile: typeof updateProfile;
   removeAvatar: typeof removeAvatar;

package/dist/auth/server.js

@@ -1,7 +1,6 @@
 import { settings } from "./methods/settings.js";
 import { confirmAuthenticatorSetup, removeAuthenticator, resetAuthenticator, sendAuthenticatorResetCode, skipAuthenticatorSetup, startAuthenticatorSetup, verifyAuthenticator } from "./methods/authenticator.js";
 import { sendSignInCode, signInWithCode } from "./methods/code.js";
-import { resendEmailCode, verifyEmailCode } from "./methods/emailCode2fa.js";
 import { signInWithMagicLink } from "./methods/magicLink.js";
 import { signIn, signOut } from "./methods/password.js";
 import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./methods/passwordLink.js";
@@ -34,8 +33,6 @@ const auth = {
 	sendAuthenticatorResetCode,
 	resetAuthenticator,
 	removeAuthenticator,
-	verifyEmailCode,
-	resendEmailCode,
 	settings,
 	updateProfile,
 	removeAvatar,

package/dist/default-error-overlay.d.ts

@@ -1,4 +1,4 @@
-import * as react2 from "react";
+import * as react6 from "react";
 
 //#region src/default-error-overlay.d.ts
 type Props = {
@@ -8,6 +8,6 @@ type Props = {
 declare function DefaultErrorOverlay({
   error,
   reset
-}: Props): react2.JSX.Element;
+}: Props): react6.JSX.Element;
 //#endregion
 export { DefaultErrorOverlay };

package/dist/formatting.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import * as react3 from "react";
+import * as react0 from "react";
 import { ReactNode } from "react";
 
 //#region src/formatting.d.ts
@@ -94,7 +94,7 @@ declare function FormattingScope({
   /** A BCP 47 locale, such as `de-DE`. It drops the app's fixed date format inside the scope. */
   locale?: string;
   children?: ReactNode;
-}): react3.FunctionComponentElement<react3.ProviderProps<Scope>>;
+}): react0.FunctionComponentElement<react0.ProviderProps<Scope>>;
 /**
  * A date in the app's format, safe to render on the server. A timestamp whose
  * zone is not known yet renders `fallback` until the browser supplies it, so
@@ -115,6 +115,6 @@ declare function FormattedDate({
   time?: boolean;
   /** What renders while the visitor's zone is unknown. */
   fallback?: ReactNode;
-}): react3.FunctionComponentElement<react3.FragmentProps>;
+}): react0.FunctionComponentElement<react0.FragmentProps>;
 //#endregion
 export { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { DatasourceAction } from "./action.js";
-import * as _tanstack_react_start6 from "@tanstack/react-start";
+import * as _tanstack_react_start7 from "@tanstack/react-start";
 
 //#region src/mcp.d.ts
 
@@ -31,6 +31,6 @@ type SoftrMcpOptions = {
  *   ],
  * }))
  */
-declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start6.RequestMiddlewareAfterServer<{}, undefined, undefined>;
+declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start7.RequestMiddlewareAfterServer<{}, undefined, undefined>;
 //#endregion
 export { softrMcpMiddleware };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.92-emailotc.0";
+var version = "0.0.92";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react0 from "react";
+import * as react4 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
+declare function SoftrPwaHead(): react4.FunctionComponentElement<react4.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/package.json

@@ -1,37 +1,16 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.92-emailotc.0",
+  "version": "0.0.92",
   "type": "module",
   "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./client": {
-      "types": "./dist/client.d.ts",
-      "import": "./dist/client.js"
-    },
-    "./server": {
-      "types": "./dist/server.d.ts",
-      "import": "./dist/server.js"
-    },
-    "./vite": {
-      "types": "./dist/vite.d.ts",
-      "import": "./dist/vite.js"
-    }
-  },
-  "bin": {
-    "softr-sdk": "./dist/cli.js"
-  },
-  "files": [
-    "dist",
-    "schema",
-    "skills",
-    "!skills/_artifacts"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
+    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
+    "./client": { "types": "./dist/client.d.ts", "import": "./dist/client.js" },
+    "./server": { "types": "./dist/server.d.ts", "import": "./dist/server.js" },
+    "./vite": { "types": "./dist/vite.d.ts", "import": "./dist/vite.js" }
+  },
+  "bin": { "softr-sdk": "./dist/cli.js" },
+  "files": ["dist", "schema", "skills", "!skills/_artifacts"],
+  "publishConfig": { "access": "public" },
   "scripts": {
     "build": "tsdown",
     "test": "node --import ./src/test-utils/setup.ts --test",
@@ -63,9 +42,7 @@
       "optional": true
     }
   },
-  "keywords": [
-    "tanstack-intent"
-  ],
+  "keywords": ["tanstack-intent"],
   "intent": {
     "version": 1,
     "repo": "@softr/sdk",

package/skills/softr-sdk/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 # Softr SDK core

package/skills/softr-sdk/ai/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `ai` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineAiAction` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/auth/SKILL.md

@@ -3,13 +3,13 @@ name: auth
 description: >-
   Sign a visitor in, out or up from a server function with auth from
   @softr/sdk/server: password, code, Google and magic link, sign-up and its
-  confirmation, the emailed-code and authenticator-app steps, password reset links,
+  confirmation, the authenticator-app steps, password reset links,
   updateProfile, and getAuthSettings and useAuthSettings for the methods the app
   enables. Covers the Result shape, its error codes, and toReturnPath.
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.
@@ -55,13 +55,6 @@ Signing out:
 | --- | --- |
 | `auth.signOut()` | Ends every session that visitor has in this app, on every device |
 
-Finishing a sign-in that wants a code from the visitor's inbox:
-
-| Call | Does |
-| --- | --- |
-| `auth.verifyEmailCode({ code })` | Answers it with the code that was emailed |
-| `auth.resendEmailCode()` | Emails that code again |
-
 Finishing a sign-in that wants an authenticator app:
 
 | Call | Does |
@@ -204,8 +197,6 @@ Those calls take only what the visitor typed. The sign-in they finish is the one
 
 An app with no authenticator app configured never answers `authenticatorRequired`. The type still has both arms either way, so `result.data.user` does not exist until you have narrowed on `status`.
 
-`signIn` has a third answer, `{ status: 'emailCodeRequired' }`, for an app that asks a password sign-in for a code from the visitor's inbox as well. The code is already on its way. Show a code field as the next step and finish with `auth.verifyEmailCode({ code })`, see [Finishing a sign-in that needs an emailed code](#finishing-a-sign-in-that-needs-an-emailed-code). That call answers like `signIn` does, so an app that also wants an authenticator app goes on to that step after it.
-
 ## Landing after sign-in
 
 A guard that turns a signed-out visitor away sends them to the page `softr.json` names for that, usually the login page. The page they wanted rides along in the search param named for the login page. `toReturnPath` from `@softr/sdk` reads it back:
@@ -264,13 +255,10 @@ if (answer.message !== null) return setMessage(answer.message)
 if (answer.outcome.status === 'authenticatorRequired') {
   return setStep({ name: 'secondFactor', opensOn: answer.outcome.step })
 }
-if (answer.outcome.status === 'emailCodeRequired') {
-  return setStep({ name: 'emailCode' })
-}
 await navigate({ href: target })
 ```
 
-Four exits: a message for the form to render, the emailed-code step, the authenticator step, the return target.
+Three exits: a message for the form to render, the second-factor step, the return target.
 
 A server function that throws `redirect` needs the hook. Call the imported function directly and the throw never reaches the router, so a successful sign-in leaves the visitor on the form.
 
@@ -397,22 +385,6 @@ The UI has to carry email into step two, plus the name if step one collected one
 
 `password` is what the account is created with. Leave it out only for an app that signs people in with an emailed code. An app that expects a password rejects a sign-up without one, and an app that does not expect one rejects a sign-up that sends it.
 
-### Finishing a sign-in that needs an emailed code
-
-After `signIn` answers `emailCodeRequired`, the visitor owes the code that was just emailed to them:
-
-```ts
-// invalidCode for a wrong or expired code, otherwise the same two-armed result as signIn.
-const result = await auth.verifyEmailCode({ code })
-
-// For a "Resend code" link.
-const sent = await auth.resendEmailCode()
-```
-
-Send `authenticatorRequired` on to the authenticator step, never into the app.
-
-Asking for a resend too soon sends nothing and still succeeds. It answers `notAuthenticated` once the sign-in has run out of time, and the visitor then signs in again from the start.
-
 ### Finishing a sign-in that needs an authenticator app
 
 On `step: 'verify'` the visitor already has an app, and owes a code from it:

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/formatting/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `definePage`, `pageHead`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.91
+  library_version: 0.0.92
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.

package/dist/auth/methods/emailCode2fa.d.ts

@@ -1,34 +0,0 @@
-import { User } from "../user.js";
-import { AuthError, Result } from "./utils.js";
-
-//#region src/auth/methods/emailCode2fa.d.ts
-
-/**
- * Finishes a sign-in that answered `emailCodeRequired`, with the code emailed
- * to the visitor.
- *
- * A `signedIn` result means the visitor is signed in. An app that also asks for
- * an authenticator app answers `authenticatorRequired` instead, naming the step
- * to send them to next.
- */
-declare function verifyEmailCode(details: {
-  code: string;
-}): Promise<Result<{
-  status: "signedIn";
-  user: User;
-} | {
-  status: "authenticatorRequired";
-  /**
-   * `verify`: they have an authenticator app and owe a code.
-   * `setup`: the app requires one and they have none yet.
-   * `setupOptional`: same, except they may skip it instead.
-   */
-  step: "verify" | "setup" | "setupOptional";
-}, AuthError>>;
-/**
- * Emails the code for {@link verifyEmailCode} again. Asking again within a
- * short wait sends nothing and still succeeds.
- */
-declare function resendEmailCode(): Promise<Result<null, AuthError>>;
-//#endregion
-export { resendEmailCode, verifyEmailCode };

package/dist/auth/methods/emailCode2fa.js

@@ -1,71 +0,0 @@
-import { assert, panic } from "../../assertions.js";
-import { writeCookies } from "../../cookies.js";
-import { sessionConfig } from "../config.js";
-import { clearPendingAuth, makePendingAuthCookie, makeSessionDataCookie, makeSessionTokenCookie, readPendingAuthToken } from "../session.js";
-import { makePlatform } from "../platform.js";
-import { authError } from "./utils.js";
-
-//#region src/auth/methods/emailCode2fa.ts
-/**
-* Finishes a sign-in that answered `emailCodeRequired`, with the code emailed
-* to the visitor.
-*
-* A `signedIn` result means the visitor is signed in. An app that also asks for
-* an authenticator app answers `authenticatorRequired` instead, naming the step
-* to send them to next.
-*/
-async function verifyEmailCode(details) {
-	const result = await makePlatform(sessionConfig().applicationId).emailCodeVerify(readPendingAuthToken(), details.code);
-	if (!result.ok) {
-		if (result.status === 400 || result.status === 401) return authError("invalidCode", result.message);
-		if (result.status === 429) return authError("tooManyAttempts", result.message);
-		if (result.status >= 500) panic(`Expected to verify the emailed code, but got ${result.status}: ` + result.message);
-		throw new Error(`${result.message}. Check SOFTR_APPLICATION_ID and that the app asks for an emailed code at sign-in.`);
-	}
-	if (result.data.status === "MFA_REQUIRED") {
-		const { mfa } = result.data;
-		assert(mfa, "Expected a challenge from verification, but got none");
-		writeCookies([makePendingAuthCookie(mfa.challengeToken)]);
-		return {
-			success: true,
-			data: {
-				status: "authenticatorRequired",
-				step: mfa.action === "VERIFICATION_REQUIRED" ? "verify" : mfa.action === "SETUP_REQUIRED" ? "setup" : "setupOptional"
-			}
-		};
-	}
-	const { session } = result.data;
-	assert(session, "Expected a session from verification, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
-	clearPendingAuth();
-	return {
-		success: true,
-		data: {
-			status: "signedIn",
-			user: session.user
-		}
-	};
-}
-/**
-* Emails the code for {@link verifyEmailCode} again. Asking again within a
-* short wait sends nothing and still succeeds.
-*/
-async function resendEmailCode() {
-	const result = await makePlatform(sessionConfig().applicationId).emailCodeResend(readPendingAuthToken());
-	if (!result.ok) {
-		if (result.status === 401) return authError("notAuthenticated", result.message);
-		if (result.status === 429) return authError("tooManyAttempts", result.message);
-		if (result.status >= 500) panic(`Expected the code to be emailed again, but got ${result.status}: ` + result.message);
-		throw new Error(`${result.message}. Check SOFTR_APPLICATION_ID and that the app asks for an emailed code at sign-in.`);
-	}
-	return {
-		success: true,
-		data: null
-	};
-}
-
-//#endregion
-export { resendEmailCode, verifyEmailCode };