@stackframe/js 2.7.30 → 2.8.2

package/dist/lib/stack-app/apps/implementations/client-app-impl.js

@@ -83,6 +83,9 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
     this._currentUserPermissionsCache = (0, import_common2.createCacheBySession)(async (session, [teamId, recursive]) => {
       return await this._interface.listCurrentUserTeamPermissions({ teamId, recursive }, session);
     });
+    this._currentUserProjectPermissionsCache = (0, import_common2.createCacheBySession)(async (session, [recursive]) => {
+      return await this._interface.listCurrentUserProjectPermissions({ recursive }, session);
+    });
     this._currentUserTeamsCache = (0, import_common2.createCacheBySession)(async (session) => {
       return await this._interface.listCurrentUserTeams(session);
     });
@@ -447,7 +450,7 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
       }
     };
   }
-  _clientTeamPermissionFromCrud(crud) {
+  _clientPermissionFromCrud(crud) {
     return {
       id: crud.id
     };
@@ -481,14 +484,11 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
       clientMetadata: crud.client_metadata,
       clientReadOnlyMetadata: crud.client_read_only_metadata,
       async inviteUser(options) {
-        if (!options.callbackUrl && !await app._getCurrentUrl()) {
-          throw new Error("Cannot invite user without a callback URL from the server or without a redirect method. Make sure you pass the `callbackUrl` option: `inviteUser({ email, callbackUrl: ... })`");
-        }
         await app._interface.sendTeamInvitation({
           teamId: crud.id,
           email: options.email,
           session,
-          callbackUrl: options.callbackUrl ?? (0, import_url.constructRedirectUrl)(app.urls.teamInvitation)
+          callbackUrl: options.callbackUrl ?? (0, import_url.constructRedirectUrl)(app.urls.teamInvitation, "callbackUrl")
         });
         await app._teamInvitationsCache.refresh([session, crud.id]);
       },
@@ -519,8 +519,12 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
       isVerified: crud.is_verified,
       isPrimary: crud.is_primary,
       usedForAuth: crud.used_for_auth,
-      async sendVerificationEmail() {
-        await app._interface.sendCurrentUserContactChannelVerificationEmail(crud.id, (0, import_url.constructRedirectUrl)(app.urls.emailVerification), session);
+      async sendVerificationEmail(options) {
+        await app._interface.sendCurrentUserContactChannelVerificationEmail(
+          crud.id,
+          options?.callbackUrl || (0, import_url.constructRedirectUrl)(app.urls.emailVerification, "callbackUrl"),
+          session
+        );
       },
       async update(data) {
         await app._interface.updateClientContactChannel(crud.id, (0, import_contact_channels.contactChannelUpdateOptionsToCrud)(data), session);
@@ -622,6 +626,7 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
       oauthProviders: crud.oauth_providers,
       passkeyAuthEnabled: crud.passkey_auth_enabled,
       isMultiFactorRequired: crud.requires_totp_mfa,
+      isAnonymous: crud.is_anonymous,
       toClientJson() {
         return crud;
       }
@@ -662,22 +667,44 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
       async createTeam(data) {
         const crud2 = await app._interface.createClientTeam((0, import_teams.teamCreateOptionsToCrud)(data, "me"), session);
         await app._currentUserTeamsCache.refresh([session]);
+        await this.update({ selectedTeamId: crud2.id });
         return app._clientTeamFromCrud(crud2, session);
       },
       async leaveTeam(team) {
         await app._interface.leaveTeam(team.id, session);
       },
-      async listPermissions(scope, options) {
-        const recursive = options?.recursive ?? true;
-        const permissions = import_results.Result.orThrow(await app._currentUserPermissionsCache.getOrWait([session, scope.id, recursive], "write-only"));
-        return permissions.map((crud2) => app._clientTeamPermissionFromCrud(crud2));
+      async listPermissions(scopeOrOptions, options) {
+        if (scopeOrOptions && "id" in scopeOrOptions) {
+          const scope = scopeOrOptions;
+          const recursive = options?.recursive ?? true;
+          const permissions = import_results.Result.orThrow(await app._currentUserPermissionsCache.getOrWait([session, scope.id, recursive], "write-only"));
+          return permissions.map((crud2) => app._clientPermissionFromCrud(crud2));
+        } else {
+          const opts = scopeOrOptions;
+          const recursive = opts?.recursive ?? true;
+          const permissions = import_results.Result.orThrow(await app._currentUserProjectPermissionsCache.getOrWait([session, recursive], "write-only"));
+          return permissions.map((crud2) => app._clientPermissionFromCrud(crud2));
+        }
       },
-      async getPermission(scope, permissionId) {
-        const permissions = await this.listPermissions(scope);
-        return permissions.find((p) => p.id === permissionId) ?? null;
+      async getPermission(scopeOrPermissionId, permissionId) {
+        if (scopeOrPermissionId && typeof scopeOrPermissionId !== "string") {
+          const scope = scopeOrPermissionId;
+          const permissions = await this.listPermissions(scope);
+          return permissions.find((p) => p.id === permissionId) ?? null;
+        } else {
+          const pid = scopeOrPermissionId;
+          const permissions = await this.listPermissions();
+          return permissions.find((p) => p.id === pid) ?? null;
+        }
       },
-      async hasPermission(scope, permissionId) {
-        return await this.getPermission(scope, permissionId) !== null;
+      async hasPermission(scopeOrPermissionId, permissionId) {
+        if (scopeOrPermissionId && typeof scopeOrPermissionId !== "string") {
+          const scope = scopeOrPermissionId;
+          return await this.getPermission(scope, permissionId) !== null;
+        } else {
+          const pid = scopeOrPermissionId;
+          return await this.getPermission(pid) !== null;
+        }
       },
       async update(update) {
         return await app._updateClientUser(update, session);
@@ -686,10 +713,11 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
         if (!crud.primary_email) {
           throw new import_errors.StackAssertionError("User does not have a primary email");
         }
-        if (!options?.callbackUrl && !await app._getCurrentUrl()) {
-          throw new Error("Cannot send verification email without a callback URL from the server or without a redirect method. Make sure you pass the `callbackUrl` option: `sendVerificationEmail({ callbackUrl: ... })`");
-        }
-        return await app._interface.sendVerificationEmail(crud.primary_email, options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(app.urls.emailVerification), session);
+        return await app._interface.sendVerificationEmail(
+          crud.primary_email,
+          options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(app.urls.emailVerification, "callbackUrl"),
+          session
+        );
       },
       async updatePassword(options) {
         const result = await app._interface.updatePassword(options, session);
@@ -883,16 +911,10 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
     return await this._redirectToHandler("teamInvitation", options);
   }
   async sendForgotPasswordEmail(email, options) {
-    if (!options?.callbackUrl && !await this._getCurrentUrl()) {
-      throw new Error("Cannot send forgot password email without a callback URL from the server or without a redirect method. Make sure you pass the `callbackUrl` option: `sendForgotPasswordEmail({ email, callbackUrl: ... })`");
-    }
-    return await this._interface.sendForgotPasswordEmail(email, options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.passwordReset));
+    return await this._interface.sendForgotPasswordEmail(email, options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.passwordReset, "callbackUrl"));
   }
   async sendMagicLinkEmail(email, options) {
-    if (!options?.callbackUrl && !await this._getCurrentUrl()) {
-      throw new Error("Cannot send magic link email without a callback URL from the server or without a redirect method. Make sure you pass the `callbackUrl` option: `sendMagicLinkEmail({ email, callbackUrl: ... })`");
-    }
-    return await this._interface.sendMagicLinkEmail(email, options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.magicLinkCallback));
+    return await this._interface.sendMagicLinkEmail(email, options?.callbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.magicLinkCallback, "callbackUrl"));
   }
   async resetPassword(options) {
     return await this._interface.resetPassword(options);
@@ -955,7 +977,7 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
         }
         case "anonymous": {
           const tokens = await this._signUpAnonymously();
-          return await this.getUser({ tokenStore: tokens }) ?? (0, import_errors.throwErr)("Something went wrong while signing up anonymously");
+          return await this.getUser({ tokenStore: tokens, or: "anonymous-if-exists" }) ?? (0, import_errors.throwErr)("Something went wrong while signing up anonymously");
         }
         case void 0:
         case "anonymous-if-exists":
@@ -1042,7 +1064,7 @@ var __StackClientAppImplIncomplete = class __StackClientAppImplIncomplete {
   async signUpWithCredential(options) {
     this._ensurePersistentTokenStore();
     const session = await this._getSession();
-    const emailVerificationRedirectUrl = options.verificationCallbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.emailVerification);
+    const emailVerificationRedirectUrl = options.verificationCallbackUrl ?? (0, import_url.constructRedirectUrl)(this.urls.emailVerification, "verificationCallbackUrl");
     const result = await this._interface.signUpWithCredential(
       options.email,
       options.password,