@stackframe/stack-shared 2.5.18 → 2.5.20

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @stackframe/stack-shared
 
+## 2.5.20
+
+### Patch Changes
+
+- Improved account settings
+  - @stackframe/stack-sc@2.5.20
+
+## 2.5.19
+
+### Patch Changes
+
+- Team frontend components
+- Updated dependencies
+  - @stackframe/stack-sc@2.5.19
+
 ## 2.5.18
 
 ### Patch Changes

package/dist/interface/adminInterface.d.ts

@@ -45,4 +45,5 @@ export declare class StackAdminInterface extends StackServerInterface {
     updatePermissionDefinition(permissionId: string, data: TeamPermissionDefinitionsCrud['Admin']['Update']): Promise<TeamPermissionDefinitionsCrud['Admin']['Read']>;
     deletePermissionDefinition(permissionId: string): Promise<void>;
     getSvixToken(): Promise<SvixTokenCrud["Admin"]["Read"]>;
+    deleteProject(): Promise<void>;
 }

package/dist/interface/adminInterface.js

@@ -115,4 +115,9 @@ export class StackAdminInterface extends StackServerInterface {
         }, null);
         return await response.json();
     }
+    async deleteProject() {
+        await this.sendAdminRequest("/projects/current", {
+            method: "DELETE",
+        }, null);
+    }
 }

package/dist/interface/clientInterface.d.ts

@@ -5,6 +5,7 @@ import { Result } from "../utils/results";
 import { CurrentUserCrud } from './crud/current-user';
 import { ConnectedAccountAccessTokenCrud } from './crud/oauth';
 import { InternalProjectsCrud, ProjectsCrud } from './crud/projects';
+import { TeamMemberProfilesCrud } from './crud/team-member-profiles';
 import { TeamPermissionsCrud } from './crud/team-permissions';
 import { TeamsCrud } from './crud/teams';
 export type ClientInterfaceOptions = {
@@ -81,6 +82,7 @@ export declare class StackClientInterface {
     totpMfa(attemptCode: string, totp: string, session: InternalSession): Promise<{
         accessToken: any;
         refreshToken: any;
+        newUser: any;
     }>;
     signInWithCredential(email: string, password: string, session: InternalSession): Promise<KnownErrors["EmailPasswordMismatch"] | {
         accessToken: string;
@@ -123,6 +125,24 @@ export declare class StackClientInterface {
     }>;
     signOut(session: InternalSession): Promise<void>;
     getClientUserByToken(session: InternalSession): Promise<CurrentUserCrud["Client"]["Read"] | null>;
+    listTeamMemberProfiles(options: {
+        teamId?: string;
+        userId?: string;
+    }, session: InternalSession): Promise<TeamMemberProfilesCrud['Client']['Read'][]>;
+    getTeamMemberProfile(options: {
+        teamId: string;
+        userId: string;
+    }, session: InternalSession): Promise<TeamMemberProfilesCrud['Client']['Read']>;
+    leaveTeam(teamId: string, session: InternalSession): Promise<void>;
+    updateTeamMemberProfile(options: {
+        teamId: string;
+        userId: string;
+        profile: TeamMemberProfilesCrud['Client']['Update'];
+    }, session: InternalSession): Promise<void>;
+    updateTeam(options: {
+        teamId: string;
+        data: TeamsCrud['Client']['Update'];
+    }, session: InternalSession): Promise<void>;
     listCurrentUserTeamPermissions(options: {
         teamId: string;
         recursive: boolean;

package/dist/interface/clientInterface.js

@@ -5,6 +5,7 @@ import { AccessToken, InternalSession } from '../sessions';
 import { generateSecureRandomString } from '../utils/crypto';
 import { StackAssertionError, throwErr } from '../utils/errors';
 import { globalVar } from '../utils/globals';
+import { filterUndefined } from '../utils/objects';
 import { Result } from "../utils/results";
 import { deindent } from '../utils/strings';
 export class StackClientInterface {
@@ -441,6 +442,7 @@ export class StackClientInterface {
         return {
             accessToken: result.access_token,
             refreshToken: result.refresh_token,
+            newUser: result.is_new_user,
         };
     }
     async signInWithCredential(email, password, session) {
@@ -562,6 +564,9 @@ export class StackClientInterface {
         const response = await oauth.authorizationCodeGrantRequest(as, client, params, options.redirectUri, options.codeVerifier);
         const result = await oauth.processAuthorizationCodeOAuth2Response(as, client, response);
         if (oauth.isOAuth2Error(result)) {
+            if ("code" in result && result.code === "MULTI_FACTOR_AUTHENTICATION_REQUIRED") {
+                throw new KnownErrors.MultiFactorAuthenticationRequired(result.details.attempt_code);
+            }
             // TODO Handle OAuth 2.0 response body error
             throw new StackAssertionError("Outer OAuth error during authorization code response", { result });
         }
@@ -613,6 +618,45 @@ export class StackClientInterface {
             throw new StackAssertionError("User endpoint returned null; this should never happen");
         return user;
     }
+    async listTeamMemberProfiles(options, session) {
+        const response = await this.sendClientRequest("/team-member-profiles?" + new URLSearchParams(filterUndefined({
+            team_id: options.teamId,
+            user_id: options.userId,
+        })), {}, session);
+        const result = await response.json();
+        return result.items;
+    }
+    async getTeamMemberProfile(options, session) {
+        const response = await this.sendClientRequest(`/team-member-profiles/${options.teamId}/${options.userId}`, {}, session);
+        return await response.json();
+    }
+    async leaveTeam(teamId, session) {
+        await this.sendClientRequest(`/team-memberships/${teamId}/me`, {
+            method: "DELETE",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({}),
+        }, session);
+    }
+    async updateTeamMemberProfile(options, session) {
+        await this.sendClientRequest(`/team-member-profiles/${options.teamId}/${options.userId}`, {
+            method: "PATCH",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify(options.profile),
+        }, session);
+    }
+    async updateTeam(options, session) {
+        await this.sendClientRequest(`/teams/${options.teamId}`, {
+            method: "PATCH",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify(options.data),
+        }, session);
+    }
     async listCurrentUserTeamPermissions(options, session) {
         const response = await this.sendClientRequest(`/team-permissions?team_id=${options.teamId}&user_id=me&recursive=${options.recursive}`, {}, session);
         const result = await response.json();

package/dist/interface/crud/projects.d.ts

@@ -1,5 +1,5 @@
 import { CrudTypeOf } from "../../crud";
-export declare const projectsCrudServerReadSchema: import("yup").ObjectSchema<{
+export declare const projectsCrudAdminReadSchema: import("yup").ObjectSchema<{
     id: string;
     display_name: string;
     description: string;
@@ -12,6 +12,7 @@ export declare const projectsCrudServerReadSchema: import("yup").ObjectSchema<{
         sign_up_enabled: NonNullable<boolean | undefined>;
         credential_enabled: NonNullable<boolean | undefined>;
         magic_link_enabled: NonNullable<boolean | undefined>;
+        client_team_creation_enabled: NonNullable<boolean | undefined>;
         oauth_providers: {
             client_id?: string | undefined;
             client_secret?: string | undefined;
@@ -57,6 +58,7 @@ export declare const projectsCrudServerReadSchema: import("yup").ObjectSchema<{
         sign_up_enabled: undefined;
         credential_enabled: undefined;
         magic_link_enabled: undefined;
+        client_team_creation_enabled: undefined;
         oauth_providers: undefined;
         enabled_oauth_providers: undefined;
         domains: undefined;
@@ -81,6 +83,7 @@ export declare const projectsCrudClientReadSchema: import("yup").ObjectSchema<{
         sign_up_enabled: NonNullable<boolean | undefined>;
         credential_enabled: NonNullable<boolean | undefined>;
         magic_link_enabled: NonNullable<boolean | undefined>;
+        client_team_creation_enabled: NonNullable<boolean | undefined>;
         enabled_oauth_providers: {
             id: NonNullable<"google" | "github" | "facebook" | "microsoft" | "spotify" | undefined>;
         }[];
@@ -92,10 +95,11 @@ export declare const projectsCrudClientReadSchema: import("yup").ObjectSchema<{
         sign_up_enabled: undefined;
         credential_enabled: undefined;
         magic_link_enabled: undefined;
+        client_team_creation_enabled: undefined;
         enabled_oauth_providers: undefined;
     };
 }, "">;
-export declare const projectsCrudServerUpdateSchema: import("yup").ObjectSchema<{
+export declare const projectsCrudAdminUpdateSchema: import("yup").ObjectSchema<{
     display_name: string | undefined;
     description: string | null | undefined;
     is_production_mode: boolean | undefined;
@@ -104,6 +108,7 @@ export declare const projectsCrudServerUpdateSchema: import("yup").ObjectSchema<
         sign_up_enabled?: boolean | undefined;
         credential_enabled?: boolean | undefined;
         magic_link_enabled?: boolean | undefined;
+        client_team_creation_enabled?: boolean | undefined;
         oauth_providers?: {
             client_id?: string | undefined;
             client_secret?: string | undefined;
@@ -139,7 +144,7 @@ export declare const projectsCrudServerUpdateSchema: import("yup").ObjectSchema<
     is_production_mode: undefined;
     config: undefined;
 }, "">;
-export declare const projectsCrudServerCreateSchema: import("yup").ObjectSchema<{
+export declare const projectsCrudAdminCreateSchema: import("yup").ObjectSchema<{
     display_name: string;
     description: string | null | undefined;
     is_production_mode: boolean | undefined;
@@ -148,6 +153,7 @@ export declare const projectsCrudServerCreateSchema: import("yup").ObjectSchema<
         sign_up_enabled?: boolean | undefined;
         credential_enabled?: boolean | undefined;
         magic_link_enabled?: boolean | undefined;
+        client_team_creation_enabled?: boolean | undefined;
         oauth_providers?: {
             client_id?: string | undefined;
             client_secret?: string | undefined;
@@ -185,6 +191,7 @@ export declare const projectsCrudServerCreateSchema: import("yup").ObjectSchema<
     is_production_mode: undefined;
     config: undefined;
 }, "">;
+export declare const projectsCrudAdminDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
 export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
     clientReadSchema: import("yup").ObjectSchema<{
         id: string;
@@ -193,6 +200,7 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             sign_up_enabled: NonNullable<boolean | undefined>;
             credential_enabled: NonNullable<boolean | undefined>;
             magic_link_enabled: NonNullable<boolean | undefined>;
+            client_team_creation_enabled: NonNullable<boolean | undefined>;
             enabled_oauth_providers: {
                 id: NonNullable<"google" | "github" | "facebook" | "microsoft" | "spotify" | undefined>;
             }[];
@@ -204,10 +212,11 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             sign_up_enabled: undefined;
             credential_enabled: undefined;
             magic_link_enabled: undefined;
+            client_team_creation_enabled: undefined;
             enabled_oauth_providers: undefined;
         };
     }, "">;
-    serverReadSchema: import("yup").ObjectSchema<{
+    adminReadSchema: import("yup").ObjectSchema<{
         id: string;
         display_name: string;
         description: string;
@@ -220,6 +229,7 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             sign_up_enabled: NonNullable<boolean | undefined>;
             credential_enabled: NonNullable<boolean | undefined>;
             magic_link_enabled: NonNullable<boolean | undefined>;
+            client_team_creation_enabled: NonNullable<boolean | undefined>;
             oauth_providers: {
                 client_id?: string | undefined;
                 client_secret?: string | undefined;
@@ -265,6 +275,7 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             sign_up_enabled: undefined;
             credential_enabled: undefined;
             magic_link_enabled: undefined;
+            client_team_creation_enabled: undefined;
             oauth_providers: undefined;
             enabled_oauth_providers: undefined;
             domains: undefined;
@@ -282,7 +293,7 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             team_member_default_permissions: undefined;
         };
     }, "">;
-    serverUpdateSchema: import("yup").ObjectSchema<{
+    adminUpdateSchema: import("yup").ObjectSchema<{
         display_name: string | undefined;
         description: string | null | undefined;
         is_production_mode: boolean | undefined;
@@ -291,6 +302,7 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
             sign_up_enabled?: boolean | undefined;
             credential_enabled?: boolean | undefined;
             magic_link_enabled?: boolean | undefined;
+            client_team_creation_enabled?: boolean | undefined;
             oauth_providers?: {
                 client_id?: string | undefined;
                 client_secret?: string | undefined;
@@ -326,18 +338,24 @@ export declare const projectsCrud: import("../../crud").CrudSchemaFromOptions<{
         is_production_mode: undefined;
         config: undefined;
     }, "">;
+    adminDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
     docs: {
         clientRead: {
             summary: string;
             description: string;
             tags: string[];
         };
-        serverRead: {
+        adminRead: {
             summary: string;
             description: string;
             tags: string[];
         };
-        serverUpdate: {
+        adminUpdate: {
+            summary: string;
+            description: string;
+            tags: string[];
+        };
+        adminDelete: {
             summary: string;
             description: string;
             tags: string[];
@@ -359,6 +377,7 @@ export declare const internalProjectsCrud: import("../../crud").CrudSchemaFromOp
             sign_up_enabled: NonNullable<boolean | undefined>;
             credential_enabled: NonNullable<boolean | undefined>;
             magic_link_enabled: NonNullable<boolean | undefined>;
+            client_team_creation_enabled: NonNullable<boolean | undefined>;
             oauth_providers: {
                 client_id?: string | undefined;
                 client_secret?: string | undefined;
@@ -404,6 +423,7 @@ export declare const internalProjectsCrud: import("../../crud").CrudSchemaFromOp
             sign_up_enabled: undefined;
             credential_enabled: undefined;
             magic_link_enabled: undefined;
+            client_team_creation_enabled: undefined;
             oauth_providers: undefined;
             enabled_oauth_providers: undefined;
             domains: undefined;
@@ -430,6 +450,7 @@ export declare const internalProjectsCrud: import("../../crud").CrudSchemaFromOp
             sign_up_enabled?: boolean | undefined;
             credential_enabled?: boolean | undefined;
             magic_link_enabled?: boolean | undefined;
+            client_team_creation_enabled?: boolean | undefined;
             oauth_providers?: {
                 client_id?: string | undefined;
                 client_secret?: string | undefined;

package/dist/interface/crud/projects.js

@@ -29,7 +29,7 @@ const domainSchema = yupObject({
     domain: schemaFields.domainSchema.required(),
     handler_path: schemaFields.handlerPathSchema.required(),
 });
-export const projectsCrudServerReadSchema = yupObject({
+export const projectsCrudAdminReadSchema = yupObject({
     id: schemaFields.projectIdSchema.required(),
     display_name: schemaFields.projectDisplayNameSchema.required(),
     description: schemaFields.projectDescriptionSchema.nonNullable().defined(),
@@ -42,6 +42,7 @@ export const projectsCrudServerReadSchema = yupObject({
         sign_up_enabled: schemaFields.projectSignUpEnabledSchema.required(),
         credential_enabled: schemaFields.projectCredentialEnabledSchema.required(),
         magic_link_enabled: schemaFields.projectMagicLinkEnabledSchema.required(),
+        client_team_creation_enabled: schemaFields.projectClientTeamCreationEnabledSchema.required(),
         oauth_providers: yupArray(oauthProviderSchema.required()).required(),
         enabled_oauth_providers: yupArray(enabledOAuthProviderSchema.required()).required(),
         domains: yupArray(domainSchema.required()).required(),
@@ -58,10 +59,11 @@ export const projectsCrudClientReadSchema = yupObject({
         sign_up_enabled: schemaFields.projectSignUpEnabledSchema.required(),
         credential_enabled: schemaFields.projectCredentialEnabledSchema.required(),
         magic_link_enabled: schemaFields.projectMagicLinkEnabledSchema.required(),
+        client_team_creation_enabled: schemaFields.projectClientTeamCreationEnabledSchema.required(),
         enabled_oauth_providers: yupArray(enabledOAuthProviderSchema.required()).required(),
     }).required(),
 }).required();
-export const projectsCrudServerUpdateSchema = yupObject({
+export const projectsCrudAdminUpdateSchema = yupObject({
     display_name: schemaFields.projectDisplayNameSchema.optional(),
     description: schemaFields.projectDescriptionSchema.optional(),
     is_production_mode: schemaFields.projectIsProductionModeSchema.optional(),
@@ -69,6 +71,7 @@ export const projectsCrudServerUpdateSchema = yupObject({
         sign_up_enabled: schemaFields.projectSignUpEnabledSchema.optional(),
         credential_enabled: schemaFields.projectCredentialEnabledSchema.optional(),
         magic_link_enabled: schemaFields.projectMagicLinkEnabledSchema.optional(),
+        client_team_creation_enabled: schemaFields.projectClientTeamCreationEnabledSchema.optional(),
         allow_localhost: schemaFields.projectAllowLocalhostSchema.optional(),
         email_config: emailConfigSchema.optional().default(undefined),
         domains: yupArray(domainSchema.required()).optional().default(undefined),
@@ -78,34 +81,41 @@ export const projectsCrudServerUpdateSchema = yupObject({
         team_member_default_permissions: yupArray(teamPermissionSchema.required()).optional(),
     }).optional().default(undefined),
 }).required();
-export const projectsCrudServerCreateSchema = projectsCrudServerUpdateSchema.concat(yupObject({
+export const projectsCrudAdminCreateSchema = projectsCrudAdminUpdateSchema.concat(yupObject({
     display_name: schemaFields.projectDisplayNameSchema.required(),
 }).required());
+export const projectsCrudAdminDeleteSchema = schemaFields.yupMixed();
 export const projectsCrud = createCrud({
     clientReadSchema: projectsCrudClientReadSchema,
-    serverReadSchema: projectsCrudServerReadSchema,
-    serverUpdateSchema: projectsCrudServerUpdateSchema,
+    adminReadSchema: projectsCrudAdminReadSchema,
+    adminUpdateSchema: projectsCrudAdminUpdateSchema,
+    adminDeleteSchema: projectsCrudAdminDeleteSchema,
     docs: {
         clientRead: {
             summary: 'Get the current project',
             description: 'Get the current project information including display name, oauth providers and authentication methods. Useful for display the available login options to the user.',
             tags: ['Projects'],
         },
-        serverRead: {
+        adminRead: {
             summary: 'Get the current project',
             description: 'Get the current project information and configuration including display name, oauth providers, email configuration, etc.',
             tags: ['Projects'],
         },
-        serverUpdate: {
+        adminUpdate: {
             summary: 'Update the current project',
             description: 'Update the current project information and configuration including display name, oauth providers, email configuration, etc.',
             tags: ['Projects'],
         },
+        adminDelete: {
+            summary: 'Delete the current project',
+            description: 'Delete the current project and all associated data (including users, teams, API keys, project configs, etc.). Be careful, this action is irreversible.',
+            tags: ['Projects'],
+        },
     },
 });
 export const internalProjectsCrud = createCrud({
-    clientReadSchema: projectsCrudServerReadSchema,
-    clientCreateSchema: projectsCrudServerCreateSchema,
+    clientReadSchema: projectsCrudAdminReadSchema,
+    clientCreateSchema: projectsCrudAdminCreateSchema,
     docs: {
         clientList: {
             hidden: true,

package/dist/interface/crud/team-member-profiles.d.ts

@@ -10,6 +10,89 @@ export declare const teamMemberProfilesCrudClientReadSchema: import("yup").Objec
     display_name: undefined;
     profile_image_url: undefined;
 }, "">;
+export declare const teamMemberProfilesCrudServerReadSchema: import("yup").ObjectSchema<NonNullable<{
+    team_id: string;
+    user_id: string;
+    display_name: string | null;
+    profile_image_url: string | null;
+} & {
+    user: {
+        id: string;
+        display_name: string | null;
+        oauth_providers: {
+            email?: string | null | undefined;
+            id: string;
+            account_id: string;
+        }[];
+        primary_email: string | null;
+        profile_image_url: string | null;
+        client_metadata: {} | null;
+        server_metadata: {} | null;
+        primary_email_verified: NonNullable<boolean | undefined>;
+        selected_team_id: string | null;
+        selected_team: {
+            id: string;
+            created_at_millis: number;
+            display_name: string;
+            profile_image_url: string | null;
+        } | null;
+        signed_up_at_millis: number;
+        has_password: NonNullable<boolean | undefined>;
+        auth_with_email: NonNullable<boolean | undefined>;
+        requires_totp_mfa: NonNullable<boolean | undefined>;
+        auth_methods: ({
+            type: "password";
+            identifier: string;
+        } | {
+            type: "otp";
+            contact_channel: {
+                type: "email";
+                email: string;
+            };
+        } | {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        })[];
+        connected_accounts: {
+            type: "oauth";
+            provider: {
+                type: string;
+                provider_user_id: string;
+            };
+        }[];
+    };
+}>, import("yup").AnyObject, {
+    team_id: undefined;
+    user_id: undefined;
+    display_name: undefined;
+    profile_image_url: undefined;
+    user: {
+        id: undefined;
+        primary_email: undefined;
+        primary_email_verified: undefined;
+        display_name: undefined;
+        selected_team: {
+            id: undefined;
+            display_name: undefined;
+            profile_image_url: undefined;
+            created_at_millis: undefined;
+        };
+        selected_team_id: undefined;
+        profile_image_url: undefined;
+        signed_up_at_millis: undefined;
+        has_password: undefined;
+        auth_with_email: undefined;
+        requires_totp_mfa: undefined;
+        oauth_providers: undefined;
+        auth_methods: undefined;
+        connected_accounts: undefined;
+        client_metadata: undefined;
+        server_metadata: undefined;
+    };
+}, "">;
 export declare const teamMemberProfilesCrudClientUpdateSchema: import("yup").ObjectSchema<{
     display_name: string | undefined;
     profile_image_url: string | null | undefined;
@@ -29,6 +112,89 @@ export declare const teamMemberProfilesCrud: import("../../crud").CrudSchemaFrom
         display_name: undefined;
         profile_image_url: undefined;
     }, "">;
+    serverReadSchema: import("yup").ObjectSchema<NonNullable<{
+        team_id: string;
+        user_id: string;
+        display_name: string | null;
+        profile_image_url: string | null;
+    } & {
+        user: {
+            id: string;
+            display_name: string | null;
+            oauth_providers: {
+                email?: string | null | undefined;
+                id: string;
+                account_id: string;
+            }[];
+            primary_email: string | null;
+            profile_image_url: string | null;
+            client_metadata: {} | null;
+            server_metadata: {} | null;
+            primary_email_verified: NonNullable<boolean | undefined>;
+            selected_team_id: string | null;
+            selected_team: {
+                id: string;
+                created_at_millis: number;
+                display_name: string;
+                profile_image_url: string | null;
+            } | null;
+            signed_up_at_millis: number;
+            has_password: NonNullable<boolean | undefined>;
+            auth_with_email: NonNullable<boolean | undefined>;
+            requires_totp_mfa: NonNullable<boolean | undefined>;
+            auth_methods: ({
+                type: "password";
+                identifier: string;
+            } | {
+                type: "otp";
+                contact_channel: {
+                    type: "email";
+                    email: string;
+                };
+            } | {
+                type: "oauth";
+                provider: {
+                    type: string;
+                    provider_user_id: string;
+                };
+            })[];
+            connected_accounts: {
+                type: "oauth";
+                provider: {
+                    type: string;
+                    provider_user_id: string;
+                };
+            }[];
+        };
+    }>, import("yup").AnyObject, {
+        team_id: undefined;
+        user_id: undefined;
+        display_name: undefined;
+        profile_image_url: undefined;
+        user: {
+            id: undefined;
+            primary_email: undefined;
+            primary_email_verified: undefined;
+            display_name: undefined;
+            selected_team: {
+                id: undefined;
+                display_name: undefined;
+                profile_image_url: undefined;
+                created_at_millis: undefined;
+            };
+            selected_team_id: undefined;
+            profile_image_url: undefined;
+            signed_up_at_millis: undefined;
+            has_password: undefined;
+            auth_with_email: undefined;
+            requires_totp_mfa: undefined;
+            oauth_providers: undefined;
+            auth_methods: undefined;
+            connected_accounts: undefined;
+            client_metadata: undefined;
+            server_metadata: undefined;
+        };
+    }, "">;
     clientUpdateSchema: import("yup").ObjectSchema<{
         display_name: string | undefined;
         profile_image_url: string | null | undefined;

package/dist/interface/crud/team-member-profiles.js

@@ -1,18 +1,23 @@
 import { createCrud } from "../../crud";
 import * as schemaFields from "../../schema-fields";
 import { yupObject } from "../../schema-fields";
+import { usersCrudServerReadSchema } from "./users";
 export const teamMemberProfilesCrudClientReadSchema = yupObject({
     team_id: schemaFields.teamIdSchema.required(),
     user_id: schemaFields.userIdSchema.required(),
     display_name: schemaFields.teamMemberDisplayNameSchema.nullable().defined(),
     profile_image_url: schemaFields.teamMemberProfileImageUrlSchema.nullable().defined(),
 }).required();
+export const teamMemberProfilesCrudServerReadSchema = teamMemberProfilesCrudClientReadSchema.concat(yupObject({
+    user: usersCrudServerReadSchema.required(),
+})).required();
 export const teamMemberProfilesCrudClientUpdateSchema = yupObject({
     display_name: schemaFields.teamMemberDisplayNameSchema.optional(),
     profile_image_url: schemaFields.teamMemberProfileImageUrlSchema.nullable().optional(),
 }).required();
 export const teamMemberProfilesCrud = createCrud({
     clientReadSchema: teamMemberProfilesCrudClientReadSchema,
+    serverReadSchema: teamMemberProfilesCrudServerReadSchema,
     clientUpdateSchema: teamMemberProfilesCrudClientUpdateSchema,
     docs: {
         clientList: {

package/dist/interface/serverInterface.d.ts

@@ -4,6 +4,7 @@ import { Result } from "../utils/results";
 import { ClientInterfaceOptions, StackClientInterface } from "./clientInterface";
 import { CurrentUserCrud } from "./crud/current-user";
 import { ConnectedAccountAccessTokenCrud } from "./crud/oauth";
+import { TeamMemberProfilesCrud } from "./crud/team-member-profiles";
 import { TeamMembershipsCrud } from "./crud/team-memberships";
 import { TeamPermissionsCrud } from "./crud/team-permissions";
 import { TeamsCrud } from "./crud/teams";
@@ -31,6 +32,13 @@ export declare class StackServerInterface extends StackClientInterface {
     createServerUser(data: UsersCrud['Server']['Create']): Promise<UsersCrud['Server']['Read']>;
     getServerUserByToken(session: InternalSession): Promise<CurrentUserCrud['Server']['Read'] | null>;
     getServerUserById(userId: string): Promise<Result<UsersCrud['Server']['Read']>>;
+    listServerTeamMemberProfiles(options: {
+        teamId: string;
+    }): Promise<TeamMemberProfilesCrud['Server']['Read'][]>;
+    getServerTeamMemberProfile(options: {
+        teamId: string;
+        userId: string;
+    }): Promise<TeamMemberProfilesCrud['Client']['Read']>;
     listServerTeamPermissions(options: {
         userId?: string;
         teamId?: string;
@@ -58,6 +66,10 @@ export declare class StackServerInterface extends StackClientInterface {
         accessToken: string;
         refreshToken: string;
     }>;
+    leaveServerTeam(options: {
+        teamId: string;
+        userId: string;
+    }): Promise<void>;
     grantServerTeamUserPermission(teamId: string, userId: string, permissionId: string): Promise<void>;
     revokeServerTeamUserPermission(teamId: string, userId: string, permissionId: string): Promise<void>;
     deleteServerServerUser(userId: string): Promise<void>;

package/dist/interface/serverInterface.js

@@ -63,6 +63,15 @@ export class StackServerInterface extends StackClientInterface {
             return Result.error(new Error("Failed to get user"));
         return Result.ok(user);
     }
+    async listServerTeamMemberProfiles(options) {
+        const response = await this.sendServerRequest("/team-member-profiles?team_id=" + options.teamId, {}, null);
+        const result = await response.json();
+        return result.items;
+    }
+    async getServerTeamMemberProfile(options) {
+        const response = await this.sendServerRequest(`/team-member-profiles/${options.teamId}/${options.userId}`, {}, null);
+        return await response.json();
+    }
     async listServerTeamPermissions(options, session) {
         const response = await this.sendServerRequest("/team-permissions?" + new URLSearchParams(filterUndefined({
             user_id: options.userId,
@@ -169,6 +178,15 @@ export class StackServerInterface extends StackClientInterface {
             refreshToken: result.refresh_token,
         };
     }
+    async leaveServerTeam(options) {
+        await this.sendClientRequest(`/team-memberships/${options.teamId}/${options.userId}`, {
+            method: "DELETE",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({}),
+        }, null);
+    }
     async grantServerTeamUserPermission(teamId, userId, permissionId) {
         await this.sendServerRequest(`/team-permissions/${teamId}/${userId}/${permissionId}`, {
             method: "POST",

package/dist/known-errors.js

@@ -206,7 +206,7 @@ const AdminAccessTokenExpired = createKnownErrorConstructor(InvalidAdminAccessTo
 ], () => []);
 const InvalidProjectForAdminAccessToken = createKnownErrorConstructor(InvalidAdminAccessToken, "INVALID_PROJECT_FOR_ADMIN_ACCESS_TOKEN", () => [
     401,
-    "Admin access token not valid for this project.",
+    "Admin access tokens must be created on the internal project.",
 ], () => []);
 const AdminAccessTokenIsNotAdmin = createKnownErrorConstructor(InvalidAdminAccessToken, "ADMIN_ACCESS_TOKEN_IS_NOT_ADMIN", () => [
     401,

package/dist/schema-fields.d.ts

@@ -36,6 +36,7 @@ export declare const projectConfigIdSchema: yup.StringSchema<string | undefined,
 export declare const projectAllowLocalhostSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectCreateTeamOnSignUpSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectMagicLinkEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
+export declare const projectClientTeamCreationEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectSignUpEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const projectCredentialEnabledSchema: yup.BooleanSchema<boolean | undefined, yup.AnyObject, undefined, "">;
 export declare const oauthIdSchema: yup.StringSchema<"google" | "github" | "facebook" | "microsoft" | "spotify" | undefined, yup.AnyObject, undefined, "">;

package/dist/schema-fields.js

@@ -40,15 +40,17 @@ export function yupTuple(...args) {
 export function yupObject(...args) {
     const object = yup.object(...args).test('no-unknown-object-properties', ({ path }) => `${path} contains unknown properties`, (value, context) => {
         if (context.options.context?.noUnknownPathPrefixes?.some((prefix) => context.path.startsWith(prefix))) {
-            const availableKeys = new Set(Object.keys(context.schema.fields));
-            const unknownKeys = Object.keys(value ?? {}).filter(key => !availableKeys.has(key));
-            if (unknownKeys.length > 0) {
-                // TODO "did you mean XYZ"
-                return context.createError({
-                    message: `${context.path} contains unknown properties: ${unknownKeys.join(', ')}`,
-                    path: context.path,
-                    params: { unknownKeys },
-                });
+            if (context.schema.spec.noUnknown !== false) {
+                const availableKeys = new Set(Object.keys(context.schema.fields));
+                const unknownKeys = Object.keys(value ?? {}).filter(key => !availableKeys.has(key));
+                if (unknownKeys.length > 0) {
+                    // TODO "did you mean XYZ"
+                    return context.createError({
+                        message: `${context.path} contains unknown properties: ${unknownKeys.join(', ')}`,
+                        path: context.path,
+                        params: { unknownKeys },
+                    });
+                }
             }
         }
         return true;
@@ -146,6 +148,7 @@ export const projectConfigIdSchema = yupString().meta({ openapiField: { descript
 export const projectAllowLocalhostSchema = yupBoolean().meta({ openapiField: { description: 'Whether localhost is allowed as a domain for this project. Should only be allowed in development mode', exampleValue: true } });
 export const projectCreateTeamOnSignUpSchema = yupBoolean().meta({ openapiField: { description: 'Whether a team should be created for each user that signs up', exampleValue: true } });
 export const projectMagicLinkEnabledSchema = yupBoolean().meta({ openapiField: { description: 'Whether magic link authentication is enabled for this project', exampleValue: true } });
+export const projectClientTeamCreationEnabledSchema = yupBoolean().meta({ openapiField: { description: 'Whether client users can create teams', exampleValue: true } });
 export const projectSignUpEnabledSchema = yupBoolean().meta({ openapiField: { description: 'Whether users can sign up new accounts, or whether they are only allowed to sign in to existing accounts. Regardless of this option, the server API can always create new users with the `POST /users` endpoint.', exampleValue: true } });
 export const projectCredentialEnabledSchema = yupBoolean().meta({ openapiField: { description: 'Whether email password authentication is enabled for this project', exampleValue: true } });
 // Project OAuth config

package/dist/utils/errors.d.ts

@@ -2,10 +2,16 @@ import { Json } from "./json";
 export declare function throwErr(errorMessage: string, extraData?: any): never;
 export declare function throwErr(error: Error): never;
 export declare function throwErr(...args: StatusErrorConstructorParameters): never;
-export declare class StackAssertionError extends Error {
+export declare class StackAssertionError extends Error implements ErrorWithCustomCapture {
     readonly extraData?: Record<string, any> | undefined;
     constructor(message: string, extraData?: Record<string, any> | undefined, options?: ErrorOptions);
+    customCaptureExtraArgs: {
+        cause?: {} | undefined;
+    }[];
 }
+export type ErrorWithCustomCapture = {
+    customCaptureExtraArgs: any[];
+};
 export declare function registerErrorSink(sink: (location: string, error: unknown) => void): void;
 export declare function captureError(location: string, error: unknown): void;
 type Status = {

package/dist/utils/errors.js

@@ -16,6 +16,12 @@ export class StackAssertionError extends Error {
         const disclaimer = `\n\nThis is likely an error in Stack. Please make sure you are running the newest version and report it.`;
         super(`${message}${message.endsWith(disclaimer) ? "" : disclaimer}`, options);
         this.extraData = extraData;
+        this.customCaptureExtraArgs = [
+            {
+                ...this.extraData,
+                ...this.cause ? { cause: this.cause } : {},
+            },
+        ];
     }
 }
 StackAssertionError.prototype.name = "StackAssertionError";
@@ -35,7 +41,7 @@ registerErrorSink((location, error, ...extraArgs) => {
 });
 export function captureError(location, error) {
     for (const sink of errorSinks) {
-        sink(location, error);
+        sink(location, error, ...error && (typeof error === 'object' || typeof error === 'function') && "customCaptureExtraArgs" in error && Array.isArray(error.customCaptureExtraArgs) ? error.customCaptureExtraArgs : []);
     }
 }
 export class StatusError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackframe/stack-shared",
-  "version": "2.5.18",
+  "version": "2.5.20",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -36,7 +36,7 @@
     "jose": "^5.2.2",
     "oauth4webapi": "^2.10.3",
     "uuid": "^9.0.1",
-    "@stackframe/stack-sc": "2.5.18"
+    "@stackframe/stack-sc": "2.5.20"
   },
   "devDependencies": {
     "rimraf": "^5.0.5",