@spotto/contract 1.0.70-alpha.0 → 1.0.70-alpha.1

package/dist/users/index.d.ts

@@ -4,3 +4,4 @@ export * from './post';
 export * from './get';
 export * from './[id]';
 export * from './invites';
+export * from './password-reset';

package/dist/users/index.js

@@ -20,4 +20,5 @@ __exportStar(require("./post"), exports);
 __exportStar(require("./get"), exports);
 __exportStar(require("./[id]"), exports);
 __exportStar(require("./invites"), exports);
+__exportStar(require("./password-reset"), exports);
 //# sourceMappingURL=index.js.map

package/dist/users/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/users/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA2B;AAC3B,4CAAyB;AACzB,yCAAsB;AACtB,wCAAqB;AACrB,yCAAsB;AACtB,4CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/users/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA2B;AAC3B,4CAAyB;AACzB,yCAAsB;AACtB,wCAAqB;AACrB,yCAAsB;AACtB,4CAAyB;AACzB,mDAAgC"}

package/dist/users/password-reset.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Request shape for `POST /users/forgot-password`. The email is the only
+ * identifier we need; we don't take a return URL or any user-controlled
+ * routing — the link in the email points at a fixed `/reset-password`
+ * path resolved server-side from the org's tenant.
+ */
+export interface RequestPasswordResetRequest {
+    email: string;
+}
+/**
+ * Response shape for `POST /users/forgot-password`. Always empty, always
+ * 200 — the endpoint never reveals whether the email exists. Misses, SSO
+ * users, and successful sends all return the same payload to prevent
+ * email enumeration via the unauthenticated reset surface.
+ */
+export declare type RequestPasswordResetResponse = Record<string, never>;
+export interface ResetPasswordRequest {
+    password: string;
+}
+/**
+ * Response shape for `POST /users/reset-password/:token`. Empty on
+ * success; the FE redirects to login. 404 for not-found / expired /
+ * already-consumed (same response for all three, mirroring invite
+ * accept).
+ */
+export declare type ResetPasswordResponse = Record<string, never>;

package/dist/users/password-reset.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=password-reset.js.map

package/dist/users/password-reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../../src/users/password-reset.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@spotto/contract",
   "license": "ISC",
-  "version": "1.0.70-alpha.0",
+  "version": "1.0.70-alpha.1",
   "description": "Spotto's API Contract type definitions",
   "main": "./dist/index.js",
   "files": [
@@ -18,5 +18,5 @@
     "@types/geojson": "^7946.0.11",
     "shx": "^0.3.4"
   },
-  "gitHead": "de1ef27eb8669459f3eab4799e816919b56d0b61"
+  "gitHead": "f9ca7e502cb0a991ebbc204eb54b166d64f2a307"
 }