@spacelr/sdk 0.7.0 → 0.8.1

package/dist/index.mjs

@@ -115,7 +115,7 @@ var HttpClient = class {
       });
       const responseBody = await this.parseResponse(response);
       if (!response.ok) {
-        if (options.authenticated && response.status === 401) {
+        if (options.authenticated && response.status === 401 && !options.skipAuthRefresh) {
           if (await this.recoverFromAuthFailure(isRetry)) {
             return this.requestWithRetry(options, true);
           }
@@ -1395,7 +1395,11 @@ var AuthModule = class {
       await this.http.request({
         method: "POST",
         path: "/auth/logout",
-        authenticated: true
+        authenticated: true,
+        // A 401 here means the session is already gone — do not trigger the
+        // refresh/auth-lost recovery, or an auth-lost handler that calls
+        // logout would recurse into an endless 401 loop.
+        skipAuthRefresh: true
       });
     } catch {
     }
@@ -1547,6 +1551,88 @@ var AuthModule = class {
     await this.storeTokensFromLogin(response);
     return response;
   }
+  /**
+   * Fetch WebAuthn assertion options to start a passkey login.
+   * Pass `email` to scope the challenge to a known user's registered
+   * credentials; omit it for a discoverable-credential (usernameless) flow.
+   */
+  async beginPasskeyLogin(email) {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/login/options",
+      body: email ? { email } : {}
+    });
+  }
+  /**
+   * Verify a WebAuthn assertion produced by `navigator.credentials.get()`
+   * against the options returned by `beginPasskeyLogin()`, completing login.
+   */
+  async verifyPasskeyLogin(response) {
+    const result = await this.http.request({
+      method: "POST",
+      path: "/auth/passkey/login/verify",
+      body: { response }
+    });
+    await this.storeTokensFromLogin(result);
+    return result;
+  }
+  /**
+   * Fetch WebAuthn attestation options to register a new passkey for the
+   * currently authenticated user.
+   */
+  async beginPasskeyRegistration() {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/register/options",
+      authenticated: true,
+      body: {}
+    });
+  }
+  /**
+   * Verify a WebAuthn attestation produced by `navigator.credentials.create()`
+   * against the options returned by `beginPasskeyRegistration()`, saving the
+   * new credential under the current user. This does not issue tokens or
+   * change auth state — the caller is already authenticated.
+   */
+  async verifyPasskeyRegistration(response, label) {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/register/verify",
+      authenticated: true,
+      body: { response, label }
+    });
+  }
+  /**
+   * List the WebAuthn passkey credentials registered for the current user.
+   */
+  async listPasskeys() {
+    return this.http.request({
+      method: "GET",
+      path: "/auth/passkey/credentials",
+      authenticated: true
+    });
+  }
+  /**
+   * Rename a registered passkey credential (e.g. "My Laptop").
+   */
+  async renamePasskey(credentialId, label) {
+    return this.http.request({
+      method: "PATCH",
+      path: `/auth/passkey/credentials/${encodeURIComponent(credentialId)}`,
+      authenticated: true,
+      body: { label }
+    });
+  }
+  /**
+   * Delete a registered passkey credential.
+   */
+  async deletePasskey(credentialId) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/passkey/credentials/${encodeURIComponent(credentialId)}`,
+      authenticated: true
+    });
+  }
   async storeTokensFromLogin(response) {
     const expiresAt = response.expires_in ? Math.floor(Date.now() / 1e3) + response.expires_in : void 0;
     await this.tokenManager.setTokens({