@stackframe/stack-shared 2.7.28 → 2.7.30

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @stackframe/stack-shared
 
+## 2.7.30
+
+### Patch Changes
+
+- Various changes
+
+## 2.7.29
+
+### Patch Changes
+
+- Various changes
+
 ## 2.7.28
 
 ### Patch Changes

package/dist/interface/clientInterface.d.ts

@@ -116,7 +116,11 @@ export declare class StackClientInterface {
     signUpWithCredential(email: string, password: string, emailVerificationRedirectUrl: string, session: InternalSession): Promise<Result<{
         accessToken: string;
         refreshToken: string;
-    }, KnownErrors["UserEmailAlreadyExists"] | KnownErrors["PasswordRequirementsNotMet"]>>;
+    }, KnownErrors["UserWithEmailAlreadyExists"] | KnownErrors["PasswordRequirementsNotMet"]>>;
+    signUpAnonymously(session: InternalSession): Promise<Result<{
+        accessToken: string;
+        refreshToken: string;
+    }, never>>;
     signInWithMagicLink(code: string): Promise<Result<{
         newUser: boolean;
         accessToken: string;

package/dist/interface/clientInterface.js

@@ -566,7 +566,20 @@ export class StackClientInterface {
                 password,
                 verification_callback_url: emailVerificationRedirectUrl,
             }),
-        }, session, [KnownErrors.UserEmailAlreadyExists, KnownErrors.PasswordRequirementsNotMet]);
+        }, session, [KnownErrors.UserWithEmailAlreadyExists, KnownErrors.PasswordRequirementsNotMet]);
+        if (res.status === "error") {
+            return Result.error(res.error);
+        }
+        const result = await res.data.json();
+        return Result.ok({
+            accessToken: result.access_token,
+            refreshToken: result.refresh_token,
+        });
+    }
+    async signUpAnonymously(session) {
+        const res = await this.sendClientRequestAndCatchKnownError("/auth/anonymous/sign-up", {
+            method: "POST",
+        }, session, []);
         if (res.status === "error") {
             return Result.error(res.error);
         }

package/dist/interface/crud/current-user.d.ts

@@ -16,6 +16,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         passkey_auth_enabled: boolean;
         otp_auth_enabled: boolean;
         selected_team_id: string | null;
+        is_anonymous: boolean;
         signed_up_at_millis: number;
         has_password: boolean;
         auth_with_email: boolean;
@@ -51,6 +52,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -80,6 +82,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -112,6 +115,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -139,6 +143,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         otp_auth_enabled: undefined;
         totp_secret_base64: undefined;
         selected_team_id: undefined;
+        is_anonymous: undefined;
     }, "">;
     serverUpdateSchema: import("yup").ObjectSchema<{
         display_name: string | null | undefined;
@@ -155,6 +160,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         otp_auth_enabled: boolean | undefined;
         totp_secret_base64: string | null | undefined;
         selected_team_id: string | null | undefined;
+        is_anonymous: boolean | undefined;
     }, import("yup").AnyObject, {
         display_name: undefined;
         profile_image_url: undefined;
@@ -170,6 +176,7 @@ export declare const currentUserCrud: import("../../crud").CrudSchemaFromOptions
         otp_auth_enabled: undefined;
         totp_secret_base64: undefined;
         selected_team_id: undefined;
+        is_anonymous: undefined;
     }, "">;
     clientDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
     docs: {

package/dist/interface/crud/current-user.js

@@ -28,6 +28,7 @@ const clientReadSchema = usersCrudServerReadSchema.pick([
     "requires_totp_mfa",
     "otp_auth_enabled",
     "passkey_auth_enabled",
+    "is_anonymous",
 ]).concat(yupObject({
     selected_team: teamsCrudClientReadSchema.nullable().defined(),
 })).defined();

package/dist/interface/crud/team-invitation.d.ts

@@ -29,6 +29,16 @@ export declare const teamInvitationCrud: import("../../crud").CrudSchemaFromOpti
             description: string;
             tags: string[];
         };
+        clientList: {
+            summary: string;
+            description: string;
+            tags: string[];
+        };
+        clientDelete: {
+            summary: string;
+            description: string;
+            tags: string[];
+        };
     };
 }>;
 export type TeamInvitationCrud = CrudTypeOf<typeof teamInvitationCrud>;

package/dist/interface/crud/team-invitation.js

@@ -16,5 +16,15 @@ export const teamInvitationCrud = createCrud({
             description: "",
             tags: ["Teams"],
         },
+        clientList: {
+            summary: "List team invitations",
+            description: "",
+            tags: ["Teams"],
+        },
+        clientDelete: {
+            summary: "Delete a team invitation",
+            description: "",
+            tags: ["Teams"],
+        },
     },
 });

package/dist/interface/crud/team-member-profiles.d.ts

@@ -34,6 +34,7 @@ export declare const teamMemberProfilesCrudServerReadSchema: import("yup").Objec
         passkey_auth_enabled: boolean;
         otp_auth_enabled: boolean;
         selected_team_id: string | null;
+        is_anonymous: boolean;
         selected_team: {
             client_metadata?: {} | null | undefined;
             client_read_only_metadata?: {} | null | undefined;
@@ -79,6 +80,7 @@ export declare const teamMemberProfilesCrudServerReadSchema: import("yup").Objec
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -127,6 +129,7 @@ export declare const teamMemberProfilesCrud: import("../../crud").CrudSchemaFrom
             passkey_auth_enabled: boolean;
             otp_auth_enabled: boolean;
             selected_team_id: string | null;
+            is_anonymous: boolean;
             selected_team: {
                 client_metadata?: {} | null | undefined;
                 client_read_only_metadata?: {} | null | undefined;
@@ -172,6 +175,7 @@ export declare const teamMemberProfilesCrud: import("../../crud").CrudSchemaFrom
             client_read_only_metadata: undefined;
             server_metadata: undefined;
             last_active_at_millis: undefined;
+            is_anonymous: undefined;
             oauth_providers: undefined;
             auth_with_email: undefined;
             requires_totp_mfa: undefined;

package/dist/interface/crud/users.d.ts

@@ -14,6 +14,7 @@ export declare const usersCrudServerUpdateSchema: import("yup").ObjectSchema<{
     otp_auth_enabled: boolean | undefined;
     totp_secret_base64: string | null | undefined;
     selected_team_id: string | null | undefined;
+    is_anonymous: boolean | undefined;
 }, import("yup").AnyObject, {
     display_name: undefined;
     profile_image_url: undefined;
@@ -29,6 +30,7 @@ export declare const usersCrudServerUpdateSchema: import("yup").ObjectSchema<{
     otp_auth_enabled: undefined;
     totp_secret_base64: undefined;
     selected_team_id: undefined;
+    is_anonymous: undefined;
 }, "">;
 export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
     id: string;
@@ -55,6 +57,7 @@ export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
     client_read_only_metadata: {} | null;
     server_metadata: {} | null;
     last_active_at_millis: number;
+    is_anonymous: boolean;
     oauth_providers: {
         email?: string | null | undefined;
         id: string;
@@ -87,6 +90,7 @@ export declare const usersCrudServerReadSchema: import("yup").ObjectSchema<{
     client_read_only_metadata: undefined;
     server_metadata: undefined;
     last_active_at_millis: undefined;
+    is_anonymous: undefined;
     oauth_providers: undefined;
     auth_with_email: undefined;
     requires_totp_mfa: undefined;
@@ -105,12 +109,14 @@ export declare const usersCrudServerCreateSchema: import("yup").ObjectSchema<{
     password_hash: string | undefined;
     otp_auth_enabled: boolean | undefined;
     totp_secret_base64: string | null | undefined;
+    is_anonymous: boolean | undefined;
 } & {
     oauth_providers: {
         email: string | null;
         id: string;
         account_id: string;
     }[] | undefined;
+    is_anonymous: boolean | undefined;
 }, import("yup").AnyObject, {
     display_name: undefined;
     profile_image_url: undefined;
@@ -126,6 +132,7 @@ export declare const usersCrudServerCreateSchema: import("yup").ObjectSchema<{
     otp_auth_enabled: undefined;
     totp_secret_base64: undefined;
     selected_team_id: undefined;
+    is_anonymous: undefined;
     oauth_providers: undefined;
 }, "">;
 export declare const usersCrudServerDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
@@ -155,6 +162,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -187,6 +195,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -206,6 +215,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         otp_auth_enabled: boolean | undefined;
         totp_secret_base64: string | null | undefined;
         selected_team_id: string | null | undefined;
+        is_anonymous: boolean | undefined;
     }, import("yup").AnyObject, {
         display_name: undefined;
         profile_image_url: undefined;
@@ -221,6 +231,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         otp_auth_enabled: undefined;
         totp_secret_base64: undefined;
         selected_team_id: undefined;
+        is_anonymous: undefined;
     }, "">;
     serverCreateSchema: import("yup").ObjectSchema<{
         primary_email: string | null | undefined;
@@ -236,12 +247,14 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         password_hash: string | undefined;
         otp_auth_enabled: boolean | undefined;
         totp_secret_base64: string | null | undefined;
+        is_anonymous: boolean | undefined;
     } & {
         oauth_providers: {
             email: string | null;
             id: string;
             account_id: string;
         }[] | undefined;
+        is_anonymous: boolean | undefined;
     }, import("yup").AnyObject, {
         display_name: undefined;
         profile_image_url: undefined;
@@ -257,6 +270,7 @@ export declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
         otp_auth_enabled: undefined;
         totp_secret_base64: undefined;
         selected_team_id: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
     }, "">;
     serverDeleteSchema: import("yup").MixedSchema<{} | undefined, import("yup").AnyObject, undefined, "">;
@@ -316,6 +330,7 @@ export declare const userCreatedWebhookEvent: {
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -348,6 +363,7 @@ export declare const userCreatedWebhookEvent: {
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -385,6 +401,7 @@ export declare const userUpdatedWebhookEvent: {
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -417,6 +434,7 @@ export declare const userUpdatedWebhookEvent: {
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;

package/dist/interface/crud/users.js

@@ -16,6 +16,7 @@ export const usersCrudServerUpdateSchema = fieldSchema.yupObject({
     otp_auth_enabled: fieldSchema.userOtpAuthEnabledMutationSchema.optional(),
     totp_secret_base64: fieldSchema.userTotpSecretMutationSchema.optional(),
     selected_team_id: fieldSchema.selectedTeamIdSchema.nullable().optional(),
+    is_anonymous: fieldSchema.yupBoolean().oneOf([false]).optional(),
 }).defined();
 export const usersCrudServerReadSchema = fieldSchema.yupObject({
     id: fieldSchema.userIdSchema.defined(),
@@ -34,6 +35,7 @@ export const usersCrudServerReadSchema = fieldSchema.yupObject({
     client_read_only_metadata: fieldSchema.userClientReadOnlyMetadataSchema,
     server_metadata: fieldSchema.userServerMetadataSchema,
     last_active_at_millis: fieldSchema.userLastActiveAtMillisSchema.nonNullable().defined(),
+    is_anonymous: fieldSchema.yupBoolean().defined(),
     oauth_providers: fieldSchema.yupArray(fieldSchema.yupObject({
         id: fieldSchema.yupString().defined(),
         account_id: fieldSchema.yupString().defined(),
@@ -54,6 +56,7 @@ export const usersCrudServerCreateSchema = usersCrudServerUpdateSchema.omit(['se
         account_id: fieldSchema.yupString().defined(),
         email: fieldSchema.yupString().nullable().defined().default(null),
     }).defined()).optional().meta({ openapiField: { hidden: true } }),
+    is_anonymous: fieldSchema.yupBoolean().optional(),
 }).defined());
 export const usersCrudServerDeleteSchema = fieldSchema.yupMixed();
 export const usersCrud = createCrud({

package/dist/interface/webhooks.d.ts

@@ -35,6 +35,7 @@ export declare const webhookEvents: readonly [{
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -67,6 +68,7 @@ export declare const webhookEvents: readonly [{
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;
@@ -103,6 +105,7 @@ export declare const webhookEvents: readonly [{
         client_read_only_metadata: {} | null;
         server_metadata: {} | null;
         last_active_at_millis: number;
+        is_anonymous: boolean;
         oauth_providers: {
             email?: string | null | undefined;
             id: string;
@@ -135,6 +138,7 @@ export declare const webhookEvents: readonly [{
         client_read_only_metadata: undefined;
         server_metadata: undefined;
         last_active_at_millis: undefined;
+        is_anonymous: undefined;
         oauth_providers: undefined;
         auth_with_email: undefined;
         requires_totp_mfa: undefined;

package/dist/known-errors.d.ts

@@ -204,7 +204,7 @@ export declare const KnownErrors: {
     };
     InvalidProjectForAccessToken: KnownErrorConstructor<KnownError & KnownErrorBrand<"SESSION_AUTHENTICATION_ERROR"> & {
         constructorArgs: [statusCode: number, humanReadableMessage: string, details?: Json | undefined];
-    } & KnownErrorBrand<"INVALID_SESSION_AUTHENTICATION"> & KnownErrorBrand<"INVALID_ACCESS_TOKEN"> & KnownErrorBrand<"INVALID_PROJECT_FOR_ACCESS_TOKEN">, []> & {
+    } & KnownErrorBrand<"INVALID_SESSION_AUTHENTICATION"> & KnownErrorBrand<"INVALID_ACCESS_TOKEN"> & KnownErrorBrand<"INVALID_PROJECT_FOR_ACCESS_TOKEN">, [expectedProjectId: string, actualProjectId: string]> & {
         errorCode: "INVALID_PROJECT_FOR_ACCESS_TOKEN";
     };
     RefreshTokenError: KnownErrorConstructor<KnownError & KnownErrorBrand<"REFRESH_TOKEN_ERROR">, [statusCode: number, humanReadableMessage: string, details?: Json | undefined]> & {
@@ -220,7 +220,7 @@ export declare const KnownErrors: {
     } & KnownErrorBrand<"REFRESH_TOKEN_NOT_FOUND_OR_EXPIRED">, []> & {
         errorCode: "REFRESH_TOKEN_NOT_FOUND_OR_EXPIRED";
     };
-    UserEmailAlreadyExists: KnownErrorConstructor<KnownError & KnownErrorBrand<"USER_EMAIL_ALREADY_EXISTS">, []> & {
+    UserWithEmailAlreadyExists: KnownErrorConstructor<KnownError & KnownErrorBrand<"USER_EMAIL_ALREADY_EXISTS">, [email: string]> & {
         errorCode: "USER_EMAIL_ALREADY_EXISTS";
     };
     EmailNotVerified: KnownErrorConstructor<KnownError & KnownErrorBrand<"EMAIL_NOT_VERIFIED">, []> & {
@@ -247,6 +247,9 @@ export declare const KnownErrors: {
     PasskeyAuthenticationNotEnabled: KnownErrorConstructor<KnownError & KnownErrorBrand<"PASSKEY_AUTHENTICATION_NOT_ENABLED">, []> & {
         errorCode: "PASSKEY_AUTHENTICATION_NOT_ENABLED";
     };
+    AnonymousAccountsNotEnabled: KnownErrorConstructor<KnownError & KnownErrorBrand<"ANONYMOUS_ACCOUNTS_NOT_ENABLED">, []> & {
+        errorCode: "ANONYMOUS_ACCOUNTS_NOT_ENABLED";
+    };
     EmailPasswordMismatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"EMAIL_PASSWORD_MISMATCH">, []> & {
         errorCode: "EMAIL_PASSWORD_MISMATCH";
     };

package/dist/known-errors.js

@@ -246,10 +246,14 @@ const AccessTokenExpired = createKnownErrorConstructor(InvalidAccessToken, "ACCE
     `Access token has expired. Please refresh it and try again.${expiredAt ? ` (The access token expired at ${expiredAt.toISOString()}.)` : ""}`,
     { expired_at_millis: expiredAt?.getTime() ?? null },
 ], (json) => [json.expired_at_millis ? new Date(json.expired_at_millis) : undefined]);
-const InvalidProjectForAccessToken = createKnownErrorConstructor(InvalidAccessToken, "INVALID_PROJECT_FOR_ACCESS_TOKEN", () => [
+const InvalidProjectForAccessToken = createKnownErrorConstructor(InvalidAccessToken, "INVALID_PROJECT_FOR_ACCESS_TOKEN", (expectedProjectId, actualProjectId) => [
     401,
-    "Access token not valid for this project.",
-], () => []);
+    `Access token not valid for this project. Expected project ID ${JSON.stringify(expectedProjectId)}, but the token is for project ID ${JSON.stringify(actualProjectId)}.`,
+    {
+        expected_project_id: expectedProjectId,
+        actual_project_id: actualProjectId,
+    },
+], (json) => [json.expected_project_id, json.actual_project_id]);
 const RefreshTokenError = createKnownErrorConstructor(KnownError, "REFRESH_TOKEN_ERROR", "inherit", "inherit");
 const RefreshTokenNotFoundOrExpired = createKnownErrorConstructor(RefreshTokenError, "REFRESH_TOKEN_NOT_FOUND_OR_EXPIRED", () => [
     401,
@@ -263,10 +267,13 @@ const ProviderRejected = createKnownErrorConstructor(RefreshTokenError, "PROVIDE
     401,
     "The provider refused to refresh their token. This usually means that the provider used to authenticate the user no longer regards this session as valid, and the user must re-authenticate.",
 ], () => []);
-const UserEmailAlreadyExists = createKnownErrorConstructor(KnownError, "USER_EMAIL_ALREADY_EXISTS", () => [
+const UserWithEmailAlreadyExists = createKnownErrorConstructor(KnownError, "USER_EMAIL_ALREADY_EXISTS", (email) => [
     409,
-    "User email already exists.",
-], () => []);
+    `A user with email ${JSON.stringify(email)} already exists.`,
+    {
+        email,
+    },
+], (json) => [json.email]);
 const EmailNotVerified = createKnownErrorConstructor(KnownError, "EMAIL_NOT_VERIFIED", () => [
     400,
     "The email is not verified.",
@@ -313,6 +320,10 @@ const PasskeyAuthenticationNotEnabled = createKnownErrorConstructor(KnownError,
     400,
     "Passkey authentication is not enabled for this project.",
 ], () => []);
+const AnonymousAccountsNotEnabled = createKnownErrorConstructor(KnownError, "ANONYMOUS_ACCOUNTS_NOT_ENABLED", () => [
+    400,
+    "Anonymous accounts are not enabled for this project.",
+], () => []);
 const EmailPasswordMismatch = createKnownErrorConstructor(KnownError, "EMAIL_PASSWORD_MISMATCH", () => [
     400,
     "Wrong e-mail or password.",
@@ -590,7 +601,7 @@ export const KnownErrors = {
     RefreshTokenError,
     ProviderRejected,
     RefreshTokenNotFoundOrExpired,
-    UserEmailAlreadyExists,
+    UserWithEmailAlreadyExists,
     EmailNotVerified,
     UserIdDoesNotExist,
     UserNotFound,
@@ -599,6 +610,7 @@ export const KnownErrors = {
     SignUpNotEnabled,
     PasswordAuthenticationNotEnabled,
     PasskeyAuthenticationNotEnabled,
+    AnonymousAccountsNotEnabled,
     EmailPasswordMismatch,
     RedirectUrlNotWhitelisted,
     PasswordRequirementsNotMet,

package/dist/sessions.d.ts

@@ -1,6 +1,8 @@
+import * as jose from 'jose';
 export declare class AccessToken {
     readonly token: string;
     constructor(token: string);
+    get decoded(): jose.JWTPayload;
     get expiresAt(): Date;
     /**
      * @returns The number of milliseconds until the access token expires, or 0 if it has already expired.

package/dist/sessions.js

@@ -8,8 +8,11 @@ export class AccessToken {
             throw new StackAssertionError("Access token is the string 'undefined'; it's unlikely this is the correct value. They're supposed to be unguessable!");
         }
     }
+    get decoded() {
+        return jose.decodeJwt(this.token);
+    }
     get expiresAt() {
-        const { exp } = jose.decodeJwt(this.token);
+        const { exp } = this.decoded;
         if (exp === undefined)
             return new Date(8640000000000000); // max date value
         return new Date(exp * 1000);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackframe/stack-shared",
-  "version": "2.7.28",
+  "version": "2.7.30",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "type": "module",