@stackframe/stack-shared 2.5.16 → 2.5.18

package/dist/interface/crud/users.d.ts

@@ -8,6 +8,7 @@ export declare const usersCrudServerUpdateSchema: import("yup").ObjectSchema<{
     primary_email_verified: boolean | undefined;
     primary_email_auth_enabled: boolean | undefined;
     password: string | null | undefined;
+    totp_secret_base64: string | null | undefined;
     selected_team_id: string | null | undefined;
 }, import("yup").AnyObject, {
     display_name: undefined;
@@ -18,6 +19,7 @@ export declare const usersCrudServerUpdateSchema: import("yup").ObjectSchema<{
     primary_email_verified: undefined;
     primary_email_auth_enabled: undefined;
     password: undefined;
+    totp_secret_base64: undefined;
     selected_team_id: undefined;
 }, "">;
 export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
@@ -36,11 +38,35 @@ export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
     signed_up_at_millis: number;
     has_password: NonNullable<boolean | undefined>;
     auth_with_email: NonNullable<boolean | undefined>;
+    requires_totp_mfa: NonNullable<boolean | undefined>;
     oauth_providers: {
         email?: string | null | undefined;
         id: string;
         account_id: string;
     }[];
+    auth_methods: ({
+        type: "password";
+        identifier: string;
+    } | {
+        type: "otp";
+        contact_channel: {
+            type: "email";
+            email: string;
+        };
+    } | {
+        type: "oauth";
+        provider: {
+            type: string;
+            provider_user_id: string;
+        };
+    })[];
+    connected_accounts: {
+        type: "oauth";
+        provider: {
+            type: string;
+            provider_user_id: string;
+        };
+    }[];
     client_metadata: {} | null;
     server_metadata: {} | null;
 }, import("yup").AnyObject, {
@@ -59,7 +85,10 @@ export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
     signed_up_at_millis: undefined;
     has_password: undefined;
     auth_with_email: undefined;
+    requires_totp_mfa: undefined;
     oauth_providers: undefined;
+    auth_methods: undefined;
+    connected_accounts: undefined;
     client_metadata: undefined;
     server_metadata: undefined;
 }, "">;
@@ -72,6 +101,7 @@ export declare const usersCrudServerCreateSchema: import("yup").ObjectSchema<{
     primary_email_verified: boolean | undefined;
     primary_email_auth_enabled: boolean | undefined;
     password: string | null | undefined;
+    totp_secret_base64: string | null | undefined;
     selected_team_id: string | null | undefined;
 } & {
     oauth_providers: {
@@ -88,6 +118,7 @@ export declare const usersCrudServerCreateSchema: import("yup").ObjectSchema<{
     primary_email_verified: undefined;
     primary_email_auth_enabled: undefined;
     password: undefined;
+    totp_secret_base64: undefined;
     selected_team_id: undefined;
     oauth_providers: undefined;
 }, "">;
@@ -109,11 +140,35 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         signed_up_at_millis: number;
         has_password: NonNullable<boolean | undefined>;
         auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
             account_id: string;
         }[];
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
         client_metadata: {} | null;
         server_metadata: {} | null;
     }, import("yup").AnyObject, {
@@ -132,7 +187,10 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         signed_up_at_millis: undefined;
         has_password: undefined;
         auth_with_email: undefined;
+        requires_totp_mfa: undefined;
         oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
         client_metadata: undefined;
         server_metadata: undefined;
     }, "">;
@@ -145,6 +203,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         primary_email_verified: boolean | undefined;
         primary_email_auth_enabled: boolean | undefined;
         password: string | null | undefined;
+        totp_secret_base64: string | null | undefined;
         selected_team_id: string | null | undefined;
     }, import("yup").AnyObject, {
         display_name: undefined;
@@ -155,6 +214,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         primary_email_verified: undefined;
         primary_email_auth_enabled: undefined;
         password: undefined;
+        totp_secret_base64: undefined;
         selected_team_id: undefined;
     }, "">;
     serverCreateSchema: import("yup").ObjectSchema<{
@@ -166,6 +226,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         primary_email_verified: boolean | undefined;
         primary_email_auth_enabled: boolean | undefined;
         password: string | null | undefined;
+        totp_secret_base64: string | null | undefined;
         selected_team_id: string | null | undefined;
     } & {
         oauth_providers: {
@@ -182,6 +243,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         primary_email_verified: undefined;
         primary_email_auth_enabled: undefined;
         password: undefined;
+        totp_secret_base64: undefined;
         selected_team_id: undefined;
         oauth_providers: undefined;
     }, "">;
@@ -233,11 +295,35 @@ export declare const userCreatedWebhookEvent: {
         signed_up_at_millis: number;
         has_password: NonNullable<boolean | undefined>;
         auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
             account_id: string;
         }[];
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
         client_metadata: {} | null;
         server_metadata: {} | null;
     }, import("yup").AnyObject, {
@@ -256,7 +342,10 @@ export declare const userCreatedWebhookEvent: {
         signed_up_at_millis: undefined;
         has_password: undefined;
         auth_with_email: undefined;
+        requires_totp_mfa: undefined;
         oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
         client_metadata: undefined;
         server_metadata: undefined;
     }, "">;
@@ -284,11 +373,35 @@ export declare const userUpdatedWebhookEvent: {
         signed_up_at_millis: number;
         has_password: NonNullable<boolean | undefined>;
         auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
             account_id: string;
         }[];
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
         client_metadata: {} | null;
         server_metadata: {} | null;
     }, import("yup").AnyObject, {
@@ -307,7 +420,10 @@ export declare const userUpdatedWebhookEvent: {
         signed_up_at_millis: undefined;
         has_password: undefined;
         auth_with_email: undefined;
+        requires_totp_mfa: undefined;
         oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
         client_metadata: undefined;
         server_metadata: undefined;
     }, "">;

package/dist/interface/crud/users.js

@@ -10,6 +10,7 @@ export const usersCrudServerUpdateSchema = fieldSchema.yupObject({
     primary_email_verified: fieldSchema.primaryEmailVerifiedSchema.optional(),
     primary_email_auth_enabled: fieldSchema.yupBoolean().optional().meta({ openapiField: { description: "Whether the primary email can be used to sign into this user's account", exampleValue: true } }),
     password: fieldSchema.yupString().nullable().meta({ openapiField: { description: 'A new password for the user, overwriting the old one (if it exists).', exampleValue: 'password' } }),
+    totp_secret_base64: fieldSchema.base64Schema.nullable().meta({ openapiField: { description: 'A TOTP secret for the user, overwriting the old one (if it exists). Set to null to disable 2FA.', exampleValue: 'dG90cC1zZWNyZXQ=' } }),
     selected_team_id: fieldSchema.selectedTeamIdSchema.nullable().optional(),
 }).required();
 export const usersCrudServerReadSchema = fieldSchema.yupObject({
@@ -22,12 +23,39 @@ export const usersCrudServerReadSchema = fieldSchema.yupObject({
     profile_image_url: fieldSchema.profileImageUrlSchema.nullable().defined(),
     signed_up_at_millis: fieldSchema.signedUpAtMillisSchema.required(),
     has_password: fieldSchema.yupBoolean().required().meta({ openapiField: { description: 'Whether the user has a password associated with their account', exampleValue: true } }),
-    auth_with_email: fieldSchema.yupBoolean().required().meta({ openapiField: { description: 'Whether the user can authenticate with their primary e-mail. If set to true, the user can log-in with credentials and/or magic link, if enabled in the project settings.', exampleValue: true } }),
+    /**
+     * @deprecated
+     */
+    auth_with_email: fieldSchema.yupBoolean().required().meta({ openapiField: { hidden: true, description: 'Whether the user can authenticate with their primary e-mail. If set to true, the user can log-in with credentials and/or magic link, if enabled in the project settings.', exampleValue: true } }),
+    /**
+     * @deprecated
+     */
+    requires_totp_mfa: fieldSchema.yupBoolean().required().meta({ openapiField: { hidden: true, description: 'Whether the user is required to use TOTP MFA to sign in', exampleValue: false } }),
+    /**
+     * @deprecated
+     */
     oauth_providers: fieldSchema.yupArray(fieldSchema.yupObject({
         id: fieldSchema.yupString().required(),
         account_id: fieldSchema.yupString().required(),
         email: fieldSchema.yupString().nullable(),
-    }).required()).required().meta({ openapiField: { description: 'A list of OAuth providers connected to this account', exampleValue: [{ id: 'google', account_id: '12345', email: 'john.doe@gmail.com' }] } }),
+    }).required()).required().meta({ openapiField: { hidden: true, description: 'A list of OAuth providers connected to this account', exampleValue: [{ id: 'google', account_id: '12345', email: 'john.doe@gmail.com' }] } }),
+    auth_methods: fieldSchema.yupArray(fieldSchema.yupUnion(fieldSchema.yupObject({
+        type: fieldSchema.yupString().oneOf(['password']).required(),
+        identifier: fieldSchema.yupString().required(),
+    }).required(), fieldSchema.yupObject({
+        type: fieldSchema.yupString().oneOf(['otp']).required(),
+        contact_channel: fieldSchema.yupObject({
+            type: fieldSchema.yupString().oneOf(['email']).required(),
+            email: fieldSchema.yupString().required(),
+        }).required(),
+    }).required(), fieldSchema.yupObject({
+        type: fieldSchema.yupString().oneOf(['oauth']).required(),
+        provider: fieldSchema.userOAuthProviderSchema.required(),
+    }).required())).required().meta({ openapiField: { hidden: true, description: 'A list of authentication methods available for this user to sign in with', exampleValue: [{ "contact_channel": { "email": "john.doe@gmail.com", "type": "email", }, "type": "otp", }] } }),
+    connected_accounts: fieldSchema.yupArray(fieldSchema.yupUnion(fieldSchema.yupObject({
+        type: fieldSchema.yupString().oneOf(['oauth']).required(),
+        provider: fieldSchema.userOAuthProviderSchema.required(),
+    }).required())).required().meta({ openapiField: { hidden: true, description: 'A list of connected accounts to this user', exampleValue: [{ "provider": { "provider_user_id": "12345", "type": "google", }, "type": "oauth", }] } }),
     client_metadata: fieldSchema.userClientMetadataSchema,
     server_metadata: fieldSchema.userServerMetadataSchema,
 }).required();

package/dist/interface/crud-deprecated/email-templates.d.ts

@@ -1,8 +1,8 @@
 import { CrudTypeOf } from "../../crud";
 export type EmailTemplateType = typeof emailTemplateTypes[number];
-export declare const emailTemplateTypes: readonly ["EMAIL_VERIFICATION", "PASSWORD_RESET", "MAGIC_LINK"];
+export declare const emailTemplateTypes: readonly ["EMAIL_VERIFICATION", "PASSWORD_RESET", "MAGIC_LINK", "TEAM_INVITATION"];
 export declare const emailTemplateServerReadSchema: import("yup").ObjectSchema<{
-    type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | undefined>;
+    type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | "TEAM_INVITATION" | undefined>;
     subject: string;
     content: {};
 }, import("yup").AnyObject, {
@@ -19,7 +19,7 @@ export declare const emailTemplateCrudServerUpdateSchema: import("yup").ObjectSc
 }, "">;
 export declare const emailTemplateCrudServerDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
 export declare const emailTemplateCrudServerCreateSchema: import("yup").ObjectSchema<{
-    type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | undefined>;
+    type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | "TEAM_INVITATION" | undefined>;
     content: {};
     subject: string;
 }, import("yup").AnyObject, {
@@ -29,7 +29,7 @@ export declare const emailTemplateCrudServerCreateSchema: import("yup").ObjectSc
 }, "">;
 export declare const emailTemplateCrud: import("../../crud").CrudSchemaFromOptions<{
     serverReadSchema: import("yup").ObjectSchema<{
-        type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | undefined>;
+        type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | "TEAM_INVITATION" | undefined>;
         subject: string;
         content: {};
     }, import("yup").AnyObject, {
@@ -45,7 +45,7 @@ export declare const emailTemplateCrud: import("../../crud").CrudSchemaFromOptio
         subject: undefined;
     }, "">;
     serverCreateSchema: import("yup").ObjectSchema<{
-        type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | undefined>;
+        type: NonNullable<"EMAIL_VERIFICATION" | "PASSWORD_RESET" | "MAGIC_LINK" | "TEAM_INVITATION" | undefined>;
         content: {};
         subject: string;
     }, import("yup").AnyObject, {

package/dist/interface/crud-deprecated/email-templates.js

@@ -1,6 +1,6 @@
 import { createCrud } from "../../crud";
 import { jsonSchema, yupMixed, yupObject, yupString } from "../../schema-fields";
-export const emailTemplateTypes = ['EMAIL_VERIFICATION', 'PASSWORD_RESET', 'MAGIC_LINK'];
+export const emailTemplateTypes = ['EMAIL_VERIFICATION', 'PASSWORD_RESET', 'MAGIC_LINK', 'TEAM_INVITATION'];
 export const emailTemplateServerReadSchema = yupObject({
     type: yupString().oneOf(emailTemplateTypes).required(),
     subject: yupString().required(),

package/dist/interface/serverInterface.d.ts

@@ -28,13 +28,14 @@ export declare class StackServerInterface extends StackClientInterface {
             refreshToken: RefreshToken | null;
         } | null;
     }, InstanceType<E>>>;
+    createServerUser(data: UsersCrud['Server']['Create']): Promise<UsersCrud['Server']['Read']>;
     getServerUserByToken(session: InternalSession): Promise<CurrentUserCrud['Server']['Read'] | null>;
     getServerUserById(userId: string): Promise<Result<UsersCrud['Server']['Read']>>;
     listServerTeamPermissions(options: {
         userId?: string;
         teamId?: string;
         recursive: boolean;
-    }, session: InternalSession): Promise<TeamPermissionsCrud['Server']['Read'][]>;
+    }, session: InternalSession | null): Promise<TeamPermissionsCrud['Server']['Read'][]>;
     listServerUsers(): Promise<UsersCrud['Server']['Read'][]>;
     listServerTeams(options?: {
         userId?: string;
@@ -57,11 +58,6 @@ export declare class StackServerInterface extends StackClientInterface {
         accessToken: string;
         refreshToken: string;
     }>;
-    listServerTeamMemberPermissions(options: {
-        teamId: string;
-        userId: string;
-        recursive: boolean;
-    }): Promise<TeamPermissionsCrud['Server']['Read'][]>;
     grantServerTeamUserPermission(teamId: string, userId: string, permissionId: string): Promise<void>;
     revokeServerTeamUserPermission(teamId: string, userId: string, permissionId: string): Promise<void>;
     deleteServerServerUser(userId: string): Promise<void>;

package/dist/interface/serverInterface.js

@@ -30,6 +30,16 @@ export class StackServerInterface extends StackClientInterface {
             throw e;
         }
     }
+    async createServerUser(data) {
+        const response = await this.sendServerRequest("/users", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify(data),
+        }, null);
+        return await response.json();
+    }
     async getServerUserByToken(session) {
         const responseOrError = await this.sendServerRequestAndCatchKnownError("/users/me", {}, session, [KnownErrors.CannotGetOwnUserWithoutUser]);
         if (responseOrError.status === "error") {
@@ -159,11 +169,6 @@ export class StackServerInterface extends StackClientInterface {
             refreshToken: result.refresh_token,
         };
     }
-    async listServerTeamMemberPermissions(options) {
-        const response = await this.sendServerRequest(`/team-permissions?team_id=${options.teamId}&user_id=${options.userId}&recursive=${options.recursive}`, {}, null);
-        const result = await response.json();
-        return result.items;
-    }
     async grantServerTeamUserPermission(teamId, userId, permissionId) {
         await this.sendServerRequest(`/team-permissions/${teamId}/${userId}/${permissionId}`, {
             method: "POST",

package/dist/interface/webhooks.d.ts

@@ -26,11 +26,35 @@ export declare const webhookEvents: readonly [{
         signed_up_at_millis: number;
         has_password: NonNullable<boolean | undefined>;
         auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
             account_id: string;
         }[];
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
         client_metadata: {} | null;
         server_metadata: {} | null;
     }, yup.AnyObject, {
@@ -49,7 +73,10 @@ export declare const webhookEvents: readonly [{
         signed_up_at_millis: undefined;
         has_password: undefined;
         auth_with_email: undefined;
+        requires_totp_mfa: undefined;
         oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
         client_metadata: undefined;
         server_metadata: undefined;
     }, "">;
@@ -76,11 +103,35 @@ export declare const webhookEvents: readonly [{
         signed_up_at_millis: number;
         has_password: NonNullable<boolean | undefined>;
         auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
             account_id: string;
         }[];
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
         client_metadata: {} | null;
         server_metadata: {} | null;
     }, yup.AnyObject, {
@@ -99,7 +150,10 @@ export declare const webhookEvents: readonly [{
         signed_up_at_millis: undefined;
         has_password: undefined;
         auth_with_email: undefined;
+        requires_totp_mfa: undefined;
         oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
         client_metadata: undefined;
         server_metadata: undefined;
     }, "">;

package/dist/known-errors.d.ts

@@ -245,6 +245,9 @@ export declare const KnownErrors: {
     ProjectNotFound: KnownErrorConstructor<KnownError & KnownErrorBrand<"PROJECT_NOT_FOUND">, [projectId: string]> & {
         errorCode: "PROJECT_NOT_FOUND";
     };
+    SignUpNotEnabled: KnownErrorConstructor<KnownError & KnownErrorBrand<"SIGN_UP_NOT_ENABLED">, []> & {
+        errorCode: "SIGN_UP_NOT_ENABLED";
+    };
     PasswordAuthenticationNotEnabled: KnownErrorConstructor<KnownError & KnownErrorBrand<"PASSWORD_AUTHENTICATION_NOT_ENABLED">, []> & {
         errorCode: "PASSWORD_AUTHENTICATION_NOT_ENABLED";
     };
@@ -345,6 +348,12 @@ export declare const KnownErrors: {
     OAuthProviderNotFoundOrNotEnabled: KnownErrorConstructor<KnownError & KnownErrorBrand<"OAUTH_PROVIDER_NOT_FOUND_OR_NOT_ENABLED">, []> & {
         errorCode: "OAUTH_PROVIDER_NOT_FOUND_OR_NOT_ENABLED";
     };
+    MultiFactorAuthenticationRequired: KnownErrorConstructor<KnownError & KnownErrorBrand<"MULTI_FACTOR_AUTHENTICATION_REQUIRED">, [attemptCode: string]> & {
+        errorCode: "MULTI_FACTOR_AUTHENTICATION_REQUIRED";
+    };
+    InvalidTotpCode: KnownErrorConstructor<KnownError & KnownErrorBrand<"INVALID_TOTP_CODE">, []> & {
+        errorCode: "INVALID_TOTP_CODE";
+    };
     UserAuthenticationRequired: KnownErrorConstructor<KnownError & KnownErrorBrand<"USER_AUTHENTICATION_REQUIRED">, []> & {
         errorCode: "USER_AUTHENTICATION_REQUIRED";
     };
@@ -360,5 +369,11 @@ export declare const KnownErrors: {
     InvalidStandardOAuthProviderId: KnownErrorConstructor<KnownError & KnownErrorBrand<"INVALID_STANDARD_OAUTH_PROVIDER_ID">, [any]> & {
         errorCode: "INVALID_STANDARD_OAUTH_PROVIDER_ID";
     };
+    InvalidAuthorizationCode: KnownErrorConstructor<KnownError & KnownErrorBrand<"INVALID_AUTHORIZATION_CODE">, []> & {
+        errorCode: "INVALID_AUTHORIZATION_CODE";
+    };
+    TeamPermissionNotFound: KnownErrorConstructor<KnownError & KnownErrorBrand<"TEAM_PERMISSION_NOT_FOUND">, [any, any, any]> & {
+        errorCode: "TEAM_PERMISSION_NOT_FOUND";
+    };
 };
 export {};

package/dist/known-errors.js

@@ -320,6 +320,10 @@ const ProjectNotFound = createKnownErrorConstructor(KnownError, "PROJECT_NOT_FOU
         },
     ];
 }, (json) => [json.project_id]);
+const SignUpNotEnabled = createKnownErrorConstructor(KnownError, "SIGN_UP_NOT_ENABLED", () => [
+    400,
+    "Creation of new accounts is not enabled for this project. Please ask the project owner to enable it.",
+], () => []);
 const PasswordAuthenticationNotEnabled = createKnownErrorConstructor(KnownError, "PASSWORD_AUTHENTICATION_NOT_ENABLED", () => [
     400,
     "Password authentication is not enabled for this project.",
@@ -471,6 +475,17 @@ const OAuthProviderNotFoundOrNotEnabled = createKnownErrorConstructor(KnownError
     400,
     "The OAuth provider is not found or not enabled.",
 ], () => []);
+const MultiFactorAuthenticationRequired = createKnownErrorConstructor(KnownError, "MULTI_FACTOR_AUTHENTICATION_REQUIRED", (attemptCode) => [
+    400,
+    `Multi-factor authentication is required for this user.`,
+    {
+        attempt_code: attemptCode,
+    },
+], (json) => [json.attempt_code]);
+const InvalidTotpCode = createKnownErrorConstructor(KnownError, "INVALID_TOTP_CODE", () => [
+    400,
+    "The TOTP code is invalid. Please try again.",
+], () => []);
 const UserAuthenticationRequired = createKnownErrorConstructor(KnownError, "USER_AUTHENTICATION_REQUIRED", () => [
     401,
     "User authentication required for this endpoint.",
@@ -488,6 +503,15 @@ const TeamPermissionRequired = createKnownErrorConstructor(KnownError, "TEAM_PER
         permission_id: permissionId,
     },
 ], (json) => [json.team_id, json.user_id, json.permission_id]);
+const TeamPermissionNotFound = createKnownErrorConstructor(KnownError, "TEAM_PERMISSION_NOT_FOUND", (teamId, userId, permissionId) => [
+    401,
+    `User ${userId} does not have permission ${permissionId} in team ${teamId}.`,
+    {
+        team_id: teamId,
+        user_id: userId,
+        permission_id: permissionId,
+    },
+], (json) => [json.team_id, json.user_id, json.permission_id]);
 const InvalidSharedOAuthProviderId = createKnownErrorConstructor(KnownError, "INVALID_SHARED_OAUTH_PROVIDER_ID", (providerId) => [
     400,
     `The shared OAuth provider with ID ${providerId} is not valid.`,
@@ -502,6 +526,10 @@ const InvalidStandardOAuthProviderId = createKnownErrorConstructor(KnownError, "
         provider_id: providerId,
     },
 ], (json) => [json.provider_id]);
+const InvalidAuthorizationCode = createKnownErrorConstructor(KnownError, "INVALID_AUTHORIZATION_CODE", () => [
+    400,
+    "The given authorization code is invalid.",
+], () => []);
 export const KnownErrors = {
     UnsupportedError,
     BodyParsingError,
@@ -548,6 +576,7 @@ export const KnownErrors = {
     UserNotFound,
     ApiKeyNotFound,
     ProjectNotFound,
+    SignUpNotEnabled,
     PasswordAuthenticationNotEnabled,
     EmailPasswordMismatch,
     RedirectUrlNotWhitelisted,
@@ -578,11 +607,15 @@ export const KnownErrors = {
     UserAlreadyConnectedToAnotherOAuthConnection,
     OuterOAuthTimeout,
     OAuthProviderNotFoundOrNotEnabled,
+    MultiFactorAuthenticationRequired,
+    InvalidTotpCode,
     UserAuthenticationRequired,
     TeamMembershipAlreadyExists,
     TeamPermissionRequired,
     InvalidSharedOAuthProviderId,
     InvalidStandardOAuthProviderId,
+    InvalidAuthorizationCode,
+    TeamPermissionNotFound,
 };
 // ensure that all known error codes are unique
 const knownErrorCodes = new Set();

package/dist/schema-fields.d.ts

@@ -12,6 +12,7 @@ export declare function yupMixed<A extends {}>(...args: Parameters<typeof yup.mi
 export declare function yupArray<A extends yup.Maybe<yup.AnyObject> = yup.AnyObject, B = any>(...args: Parameters<typeof yup.array<A, B>>): yup.ArraySchema<B[] | undefined, A, undefined, "">;
 export declare function yupTuple<T extends [unknown, ...unknown[]]>(...args: Parameters<typeof yup.tuple<T>>): yup.TupleSchema<T | undefined, yup.AnyObject, undefined, "">;
 export declare function yupObject<A extends yup.Maybe<yup.AnyObject>, B extends yup.ObjectShape>(...args: Parameters<typeof yup.object<A, B>>): yup.ObjectSchema<yup.TypeFromShape<B, yup.AnyObject> extends infer T ? T extends yup.TypeFromShape<B, yup.AnyObject> ? T extends {} ? { [k in keyof T]: T[k]; } : T : never : never, yup.AnyObject, yup.DefaultFromShape<B> extends infer T_1 ? T_1 extends yup.DefaultFromShape<B> ? T_1 extends {} ? { [k_1 in keyof T_1]: T_1[k_1]; } : T_1 : never : never, "">;
+export declare function yupUnion<T extends yup.ISchema<any>[]>(...args: T): yup.ISchema<yup.InferType<T[number]>>;
 export declare const adaptSchema: yup.MixedSchema<typeof StackAdaptSentinel | undefined, yup.AnyObject, undefined, "">;
 /**
  * Yup's URL schema does not recognize some URLs (including `http://localhost`) as a valid URL. This schema is a workaround for that.
@@ -21,6 +22,7 @@ export declare const jsonSchema: yup.MixedSchema<{} | null, yup.AnyObject, undef
 export declare const jsonStringSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const jsonStringOrEmptySchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const emailSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
+export declare const base64Schema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const clientOrHigherAuthTypeSchema: yup.StringSchema<"client" | "server" | "admin" | undefined, yup.AnyObject, undefined, "">;
 export declare const serverOrHigherAuthTypeSchema: yup.StringSchema<"server" | "admin" | undefined, yup.AnyObject, undefined, "">;
 export declare const adminAuthTypeSchema: yup.StringSchema<"admin" | undefined, yup.AnyObject, undefined, "">;
@@ -34,6 +36,7 @@ export declare const projectConfigIdSchema: yup.StringSchema<string | undefined,
 export declare const projectAllowLocalhostSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectCreateTeamOnSignUpSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectMagicLinkEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
+export declare const projectSignUpEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectCredentialEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const oauthIdSchema: yup.StringSchema<"google" | "github" | "facebook" | "microsoft" | "spotify" | undefined, yup.AnyObject, undefined, "">;
 export declare const oauthEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
@@ -63,6 +66,13 @@ export declare const profileImageUrlSchema: yup.StringSchema<string | undefined,
 export declare const signedUpAtMillisSchema: yup.NumberSchema<number | undefined, yup.AnyObject, undefined, "">;
 export declare const userClientMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
 export declare const userServerMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
+export declare const userOAuthProviderSchema: yup.ObjectSchema<{
+    type: string;
+    provider_user_id: string;
+}, yup.AnyObject, {
+    type: undefined;
+    provider_user_id: undefined;
+}, "">;
 export declare const signInEmailSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const emailOtpSignInCallbackUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const emailVerificationCallbackUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
@@ -90,6 +100,8 @@ export declare const teamProfileImageUrlSchema: yup.StringSchema<string | undefi
 export declare const teamClientMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
 export declare const teamServerMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
 export declare const teamCreatedAtMillisSchema: yup.NumberSchema<number | undefined, yup.AnyObject, undefined, "">;
+export declare const teamInvitationEmailSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
+export declare const teamInvitationCallbackUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const teamMemberDisplayNameSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare const teamMemberProfileImageUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 export declare function yupRequiredWhen<S extends yup.AnyObject>(schema: S, triggerName: string, isValue: any): S;