@sparkvault/sdk 1.24.0 → 1.24.1

package/dist/identity/api.d.ts

@@ -35,13 +35,18 @@ export declare class IdentityApi extends SparkVaultApi {
      */
     isConfigPreloaded(): boolean;
     /**
-     * Check if an email has registered passkeys and validate email domain
+     * Check if an identity (email or phone) has registered passkeys.
      *
      * Returns:
-     * - email_valid: whether the email domain has valid MX records
-     * - has_passkey: whether any passkeys are registered (only meaningful if email_valid)
+     * - identity_valid: identity passes per-type validity check
+     *   (email: MX lookup; phone: E.164 format)
+     * - has_passkey: whether any passkeys are registered for this identity
+     *   (cross-tenant — single global RP)
+     * - email_valid: legacy alias for identity_valid, present for backward
+     *   compatibility with older SDK versions
      */
-    checkPasskey(email: string): Promise<{
+    checkPasskey(identity: string, identityType?: 'email' | 'phone'): Promise<{
+        identity_valid: boolean;
         email_valid: boolean;
         has_passkey: boolean;
     }>;
@@ -68,9 +73,9 @@ export declare class IdentityApi extends SparkVaultApi {
         authContext?: AuthContext;
     }): Promise<TotpVerifyResponse>;
     /**
-     * Start passkey registration
+     * Start passkey registration for an identity (email or phone).
      */
-    startPasskeyRegister(email: string): Promise<PasskeyChallengeResponse>;
+    startPasskeyRegister(identity: string, identityType?: 'email' | 'phone'): Promise<PasskeyChallengeResponse>;
     /**
      * Complete passkey registration
      */
@@ -79,9 +84,9 @@ export declare class IdentityApi extends SparkVaultApi {
         credential: PublicKeyCredential;
     }): Promise<PasskeyVerifyResponse>;
     /**
-     * Start passkey verification
+     * Start passkey verification for an identity (email or phone).
      */
-    startPasskeyVerify(email: string, authContext?: AuthContext): Promise<PasskeyChallengeResponse>;
+    startPasskeyVerify(identity: string, identityType?: 'email' | 'phone', authContext?: AuthContext): Promise<PasskeyChallengeResponse>;
     /**
      * Complete passkey verification
      */

package/dist/sparkvault.cjs.js

@@ -850,14 +850,19 @@ class IdentityApi extends SparkVaultApi {
         return this.configCache !== null;
     }
     /**
-     * Check if an email has registered passkeys and validate email domain
+     * Check if an identity (email or phone) has registered passkeys.
      *
      * Returns:
-     * - email_valid: whether the email domain has valid MX records
-     * - has_passkey: whether any passkeys are registered (only meaningful if email_valid)
+     * - identity_valid: identity passes per-type validity check
+     *   (email: MX lookup; phone: E.164 format)
+     * - has_passkey: whether any passkeys are registered for this identity
+     *   (cross-tenant — single global RP)
+     * - email_valid: legacy alias for identity_valid, present for backward
+     *   compatibility with older SDK versions
      */
-    async checkPasskey(email) {
-        return this.request('POST', '/passkey/check', { email });
+    async checkPasskey(identity, identityType = 'email') {
+        const body = identityType === 'phone' ? { phone: identity } : { email: identity };
+        return this.request('POST', '/passkey/check', body);
     }
     /**
      * Build auth context params for API requests (OIDC/simple mode).
@@ -902,12 +907,13 @@ class IdentityApi extends SparkVaultApi {
         });
     }
     /**
-     * Start passkey registration
+     * Start passkey registration for an identity (email or phone).
      */
-    async startPasskeyRegister(email) {
+    async startPasskeyRegister(identity, identityType = 'email') {
+        const body = identityType === 'phone' ? { phone: identity } : { email: identity };
         // Backend returns { options: PublicKeyCredentialCreationOptions, session: {...} }
         // Extract and flatten to match PasskeyChallengeResponse
-        const response = await this.request('POST', '/passkey/register', { email });
+        const response = await this.request('POST', '/passkey/register', body);
         return {
             challenge: response.options.challenge,
             rpId: response.options.rp.id,
@@ -937,12 +943,13 @@ class IdentityApi extends SparkVaultApi {
         });
     }
     /**
-     * Start passkey verification
+     * Start passkey verification for an identity (email or phone).
      */
-    async startPasskeyVerify(email, authContext) {
+    async startPasskeyVerify(identity, identityType = 'email', authContext) {
+        const identityField = identityType === 'phone' ? { phone: identity } : { email: identity };
         // Backend returns { options: PublicKeyCredentialRequestOptions, session: {...} }
         // Extract and flatten to match PasskeyChallengeResponse
-        const response = await this.request('POST', '/passkey/verify', { email, ...this.buildAuthContextParams(authContext) });
+        const response = await this.request('POST', '/passkey/verify', { ...identityField, ...this.buildAuthContextParams(authContext) });
         return {
             challenge: response.options.challenge,
             rpId: response.options.rpId,
@@ -1349,10 +1356,12 @@ class PasskeyHandler {
      */
     async checkPasskey() {
         try {
-            const response = await this.api.checkPasskey(this.state.recipient);
+            const response = await this.api.checkPasskey(this.state.recipient, this.state.identityType);
             this.state.setPasskeyStatus(response.has_passkey);
+            // Prefer identity_valid; fall back to email_valid for older backends.
+            const valid = response.identity_valid ?? response.email_valid;
             return {
-                emailValid: response.email_valid,
+                emailValid: valid,
                 hasPasskey: response.has_passkey,
             };
         }
@@ -1384,12 +1393,14 @@ class PasskeyHandler {
      */
     async openPasskeyPopup(mode) {
         return new Promise((resolve) => {
-            // Build popup URL
+            // Build popup URL. Pass identity as `email` or `phone` (mutually
+            // exclusive) so the popup can render and POST the correct field.
             const params = new URLSearchParams({
                 mode,
-                email: this.state.recipient,
                 origin: window.location.origin,
             });
+            const identityParam = this.state.identityType === 'phone' ? 'phone' : 'email';
+            params.set(identityParam, this.state.recipient);
             // Add auth context for OIDC/simple mode flows
             const authContext = this.state.authContext;
             if (authContext?.authRequestId) {