@stackframe/stack 2.8.32 → 2.8.35

package/dist/index.d.mts

@@ -2,6 +2,8 @@ import { KnownErrors } from '@stackframe/stack-shared';
 import { CurrentUserCrud } from '@stackframe/stack-shared/dist/interface/crud/current-user';
 import { Result } from '@stackframe/stack-shared/dist/utils/results';
 import { ProviderType } from '@stackframe/stack-shared/dist/utils/oauth';
+import { inlineOfferSchema } from '@stackframe/stack-shared/dist/schema-fields';
+import * as yup from 'yup';
 import { ProductionModeError } from '@stackframe/stack-shared/dist/helpers/production-mode';
 import { CompleteConfig, EnvironmentConfigOverrideOverride } from '@stackframe/stack-shared/dist/config/schema';
 import { ChatContent } from '@stackframe/stack-shared/dist/interface/admin-interface';
@@ -10,8 +12,6 @@ import { InternalApiKeysCrud } from '@stackframe/stack-shared/dist/interface/cru
 import { ReadonlyJson } from '@stackframe/stack-shared/dist/utils/json';
 import { PrettifyType, IfAndOnlyIf } from '@stackframe/stack-shared/dist/utils/types';
 import { GeoInfo } from '@stackframe/stack-shared/dist/utils/geo';
-import { inlineOfferSchema } from '@stackframe/stack-shared/dist/schema-fields';
-import * as yup from 'yup';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as lucide_react from 'lucide-react';
 import React$1 from 'react';
@@ -38,7 +38,7 @@ type RedirectMethod = "window" | "nextjs" | "none" | {
     navigate?: (to: string) => void;
 };
 type GetUserOptions$1<HasTokenStore> = {
-    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | 'anonymous-if-exists';
+    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | /** @deprecated */ 'anonymous-if-exists[deprecated]';
     tokenStore?: TokenStoreInit;
 } & (HasTokenStore extends false ? {
     tokenStore: TokenStoreInit;
@@ -77,6 +77,44 @@ type OAuthScopesOnSignIn = {
 /** @internal */
 declare const stackAppInternalsSymbol: unique symbol;
 
+type InlineOffer = yup.InferType<typeof inlineOfferSchema>;
+type Item = {
+    displayName: string;
+    /**
+     * May be negative.
+     */
+    quantity: number;
+    /**
+     * Equal to Math.max(0, quantity).
+     */
+    nonNegativeQuantity: number;
+};
+type ServerItem = Item & {
+    increaseQuantity(amount: number): Promise<void>;
+    /**
+     * Decreases the quantity by the given amount.
+     *
+     * Note that you may want to use tryDecreaseQuantity instead, as it will prevent the quantity from going below 0 in a race-condition-free way.
+     */
+    decreaseQuantity(amount: number): Promise<void>;
+    /**
+     * Decreases the quantity by the given amount and returns true if the result is non-negative; returns false and does nothing if the result would be negative.
+     *
+     * Most useful for pre-paid credits.
+     */
+    tryDecreaseQuantity(amount: number): Promise<boolean>;
+};
+type Customer<IsServer extends boolean = false> = {
+    readonly id: string;
+    createCheckoutUrl(options: ({
+        offerId: string;
+    } | (IsServer extends true ? {
+        offer: InlineOffer;
+    } : never))): Promise<string>;
+} & AsyncStoreProperty<"item", [
+    itemId: string
+], IsServer extends true ? ServerItem : Item, false>;
+
 type AdminSentEmail = {
     id: string;
     to: string[];
@@ -259,40 +297,6 @@ type NotificationCategory = {
     setEnabled(enabled: boolean): Promise<void>;
 };
 
-type InlineOffer = yup.InferType<typeof inlineOfferSchema>;
-type Item = {
-    displayName: string;
-    /**
-     * May be negative.
-     */
-    quantity: number;
-    /**
-     * Equal to Math.max(0, quantity).
-     */
-    nonNegativeQuantity: number;
-};
-type ServerItem = Item & {
-    increaseQuantity(amount: number): Promise<void>;
-    /**
-     * Decreases the quantity by the given amount.
-     *
-     * Note that you may want to use tryDecreaseQuantity instead, as it will prevent the quantity from going below 0 in a race-condition-free way.
-     */
-    decreaseQuantity(amount: number): Promise<void>;
-    /**
-     * Decreases the quantity by the given amount and returns true if the result is non-negative; returns false and does nothing if the result would be negative.
-     *
-     * Most useful for pre-paid credits.
-     */
-    tryDecreaseQuantity(amount: number): Promise<boolean>;
-};
-type Customer<IsServer extends boolean = false> = {
-    readonly id: string;
-    createCheckoutUrl(offerIdOrInline: string | InlineOffer): Promise<string>;
-} & AsyncStoreProperty<"item", [
-    itemId: string
-], IsServer extends true ? ServerItem : Item, false>;
-
 type Session = {
     getTokens(): Promise<{
         accessToken: string | null;
@@ -681,6 +685,7 @@ type ServerListUsersOptions = {
     orderBy?: 'signedUpAt';
     desc?: boolean;
     query?: string;
+    includeAnonymous?: boolean;
 };
 type ServerTeamCreateOptions = TeamCreateOptions & {
     creatorUserId?: string;
@@ -747,7 +752,18 @@ type StackServerApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         nextCursor: string | null;
     }>;
     sendEmail(options: SendEmailOptions): Promise<Result<void, KnownErrors["RequiresCustomEmailServer"] | KnownErrors["SchemaError"] | KnownErrors["UserIdDoesNotExist"]>>;
-} & AsyncStoreProperty<"user", [id: string], ServerUser | null, false> & Omit<AsyncStoreProperty<"users", [], ServerUser[], true>, "listUsers" | "useUsers"> & AsyncStoreProperty<"teams", [], ServerTeam[], true> & StackClientApp<HasTokenStore, ProjectId>);
+} & AsyncStoreProperty<"user", [id: string], ServerUser | null, false> & Omit<AsyncStoreProperty<"users", [], ServerUser[], true>, "listUsers" | "useUsers"> & AsyncStoreProperty<"teams", [], ServerTeam[], true> & AsyncStoreProperty<"item", [
+    {
+        itemId: string;
+        userId: string;
+    } | {
+        itemId: string;
+        teamId: string;
+    } | {
+        itemId: string;
+        customCustomerId: string;
+    }
+], ServerItem, false> & StackClientApp<HasTokenStore, ProjectId>);
 declare const StackServerApp: StackServerAppConstructor;
 
 type StackAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = ((StackServerAppConstructorOptions<HasTokenStore, ProjectId> & {
@@ -772,7 +788,12 @@ type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends st
     displayName: string;
     themeId?: string;
     tsxSource: string;
-}[], true> & {
+}[], true> & AsyncStoreProperty<"stripeAccountInfo", [], {
+    account_id: string;
+    charges_enabled: boolean;
+    details_submitted: boolean;
+    payouts_enabled: boolean;
+} | null, false> & {
     useEmailTemplates(): {
         id: string;
         displayName: string;
@@ -829,16 +850,29 @@ type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends st
     createStripeWidgetAccountSession(): Promise<{
         client_secret: string;
     }>;
-    createPurchaseUrl(options: {
-        customerId: string;
-        offerId: string;
-    }): Promise<string>;
-    createItemQuantityChange(options: {
-        customerId: string;
+    createItemQuantityChange(options: ({
+        userId: string;
         itemId: string;
         quantity: number;
         expiresAt?: string;
         description?: string;
+    } | {
+        teamId: string;
+        itemId: string;
+        quantity: number;
+        expiresAt?: string;
+        description?: string;
+    } | {
+        customCustomerId: string;
+        itemId: string;
+        quantity: number;
+        expiresAt?: string;
+        description?: string;
+    })): Promise<void>;
+    testModePurchase(options: {
+        priceId: string;
+        fullCode: string;
+        quantity?: number;
     }): Promise<void>;
 } & StackServerApp<HasTokenStore, ProjectId>);
 declare const StackAdminApp: StackAdminAppConstructor;
@@ -950,6 +984,7 @@ type AdminProject = {
     readonly config: AdminProjectConfig;
     update(this: AdminProject, update: AdminProjectUpdateOptions): Promise<void>;
     delete(this: AdminProject): Promise<void>;
+    transfer(this: AdminProject, user: CurrentUser, newTeamId: string): Promise<void>;
     getConfig(this: AdminProject): Promise<CompleteConfig>;
     useConfig(this: AdminProject): CompleteConfig;
     updateConfig(this: AdminProject, config: EnvironmentConfigOverrideOverride): Promise<void>;
@@ -1073,7 +1108,18 @@ type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>;
         setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void;
     };
-} & AsyncStoreProperty<"project", [], Project, false> & {
+} & AsyncStoreProperty<"project", [], Project, false> & AsyncStoreProperty<"item", [
+    {
+        itemId: string;
+        userId: string;
+    } | {
+        itemId: string;
+        teamId: string;
+    } | {
+        itemId: string;
+        customCustomerId: string;
+    }
+], Item, false> & {
     [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void>;
 });
 declare const StackClientApp: StackClientAppConstructor;

package/dist/index.d.ts

@@ -2,6 +2,8 @@ import { KnownErrors } from '@stackframe/stack-shared';
 import { CurrentUserCrud } from '@stackframe/stack-shared/dist/interface/crud/current-user';
 import { Result } from '@stackframe/stack-shared/dist/utils/results';
 import { ProviderType } from '@stackframe/stack-shared/dist/utils/oauth';
+import { inlineOfferSchema } from '@stackframe/stack-shared/dist/schema-fields';
+import * as yup from 'yup';
 import { ProductionModeError } from '@stackframe/stack-shared/dist/helpers/production-mode';
 import { CompleteConfig, EnvironmentConfigOverrideOverride } from '@stackframe/stack-shared/dist/config/schema';
 import { ChatContent } from '@stackframe/stack-shared/dist/interface/admin-interface';
@@ -10,8 +12,6 @@ import { InternalApiKeysCrud } from '@stackframe/stack-shared/dist/interface/cru
 import { ReadonlyJson } from '@stackframe/stack-shared/dist/utils/json';
 import { PrettifyType, IfAndOnlyIf } from '@stackframe/stack-shared/dist/utils/types';
 import { GeoInfo } from '@stackframe/stack-shared/dist/utils/geo';
-import { inlineOfferSchema } from '@stackframe/stack-shared/dist/schema-fields';
-import * as yup from 'yup';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as lucide_react from 'lucide-react';
 import React$1 from 'react';
@@ -38,7 +38,7 @@ type RedirectMethod = "window" | "nextjs" | "none" | {
     navigate?: (to: string) => void;
 };
 type GetUserOptions$1<HasTokenStore> = {
-    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | 'anonymous-if-exists';
+    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | /** @deprecated */ 'anonymous-if-exists[deprecated]';
     tokenStore?: TokenStoreInit;
 } & (HasTokenStore extends false ? {
     tokenStore: TokenStoreInit;
@@ -77,6 +77,44 @@ type OAuthScopesOnSignIn = {
 /** @internal */
 declare const stackAppInternalsSymbol: unique symbol;
 
+type InlineOffer = yup.InferType<typeof inlineOfferSchema>;
+type Item = {
+    displayName: string;
+    /**
+     * May be negative.
+     */
+    quantity: number;
+    /**
+     * Equal to Math.max(0, quantity).
+     */
+    nonNegativeQuantity: number;
+};
+type ServerItem = Item & {
+    increaseQuantity(amount: number): Promise<void>;
+    /**
+     * Decreases the quantity by the given amount.
+     *
+     * Note that you may want to use tryDecreaseQuantity instead, as it will prevent the quantity from going below 0 in a race-condition-free way.
+     */
+    decreaseQuantity(amount: number): Promise<void>;
+    /**
+     * Decreases the quantity by the given amount and returns true if the result is non-negative; returns false and does nothing if the result would be negative.
+     *
+     * Most useful for pre-paid credits.
+     */
+    tryDecreaseQuantity(amount: number): Promise<boolean>;
+};
+type Customer<IsServer extends boolean = false> = {
+    readonly id: string;
+    createCheckoutUrl(options: ({
+        offerId: string;
+    } | (IsServer extends true ? {
+        offer: InlineOffer;
+    } : never))): Promise<string>;
+} & AsyncStoreProperty<"item", [
+    itemId: string
+], IsServer extends true ? ServerItem : Item, false>;
+
 type AdminSentEmail = {
     id: string;
     to: string[];
@@ -259,40 +297,6 @@ type NotificationCategory = {
     setEnabled(enabled: boolean): Promise<void>;
 };
 
-type InlineOffer = yup.InferType<typeof inlineOfferSchema>;
-type Item = {
-    displayName: string;
-    /**
-     * May be negative.
-     */
-    quantity: number;
-    /**
-     * Equal to Math.max(0, quantity).
-     */
-    nonNegativeQuantity: number;
-};
-type ServerItem = Item & {
-    increaseQuantity(amount: number): Promise<void>;
-    /**
-     * Decreases the quantity by the given amount.
-     *
-     * Note that you may want to use tryDecreaseQuantity instead, as it will prevent the quantity from going below 0 in a race-condition-free way.
-     */
-    decreaseQuantity(amount: number): Promise<void>;
-    /**
-     * Decreases the quantity by the given amount and returns true if the result is non-negative; returns false and does nothing if the result would be negative.
-     *
-     * Most useful for pre-paid credits.
-     */
-    tryDecreaseQuantity(amount: number): Promise<boolean>;
-};
-type Customer<IsServer extends boolean = false> = {
-    readonly id: string;
-    createCheckoutUrl(offerIdOrInline: string | InlineOffer): Promise<string>;
-} & AsyncStoreProperty<"item", [
-    itemId: string
-], IsServer extends true ? ServerItem : Item, false>;
-
 type Session = {
     getTokens(): Promise<{
         accessToken: string | null;
@@ -681,6 +685,7 @@ type ServerListUsersOptions = {
     orderBy?: 'signedUpAt';
     desc?: boolean;
     query?: string;
+    includeAnonymous?: boolean;
 };
 type ServerTeamCreateOptions = TeamCreateOptions & {
     creatorUserId?: string;
@@ -747,7 +752,18 @@ type StackServerApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         nextCursor: string | null;
     }>;
     sendEmail(options: SendEmailOptions): Promise<Result<void, KnownErrors["RequiresCustomEmailServer"] | KnownErrors["SchemaError"] | KnownErrors["UserIdDoesNotExist"]>>;
-} & AsyncStoreProperty<"user", [id: string], ServerUser | null, false> & Omit<AsyncStoreProperty<"users", [], ServerUser[], true>, "listUsers" | "useUsers"> & AsyncStoreProperty<"teams", [], ServerTeam[], true> & StackClientApp<HasTokenStore, ProjectId>);
+} & AsyncStoreProperty<"user", [id: string], ServerUser | null, false> & Omit<AsyncStoreProperty<"users", [], ServerUser[], true>, "listUsers" | "useUsers"> & AsyncStoreProperty<"teams", [], ServerTeam[], true> & AsyncStoreProperty<"item", [
+    {
+        itemId: string;
+        userId: string;
+    } | {
+        itemId: string;
+        teamId: string;
+    } | {
+        itemId: string;
+        customCustomerId: string;
+    }
+], ServerItem, false> & StackClientApp<HasTokenStore, ProjectId>);
 declare const StackServerApp: StackServerAppConstructor;
 
 type StackAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = ((StackServerAppConstructorOptions<HasTokenStore, ProjectId> & {
@@ -772,7 +788,12 @@ type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends st
     displayName: string;
     themeId?: string;
     tsxSource: string;
-}[], true> & {
+}[], true> & AsyncStoreProperty<"stripeAccountInfo", [], {
+    account_id: string;
+    charges_enabled: boolean;
+    details_submitted: boolean;
+    payouts_enabled: boolean;
+} | null, false> & {
     useEmailTemplates(): {
         id: string;
         displayName: string;
@@ -829,16 +850,29 @@ type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends st
     createStripeWidgetAccountSession(): Promise<{
         client_secret: string;
     }>;
-    createPurchaseUrl(options: {
-        customerId: string;
-        offerId: string;
-    }): Promise<string>;
-    createItemQuantityChange(options: {
-        customerId: string;
+    createItemQuantityChange(options: ({
+        userId: string;
         itemId: string;
         quantity: number;
         expiresAt?: string;
         description?: string;
+    } | {
+        teamId: string;
+        itemId: string;
+        quantity: number;
+        expiresAt?: string;
+        description?: string;
+    } | {
+        customCustomerId: string;
+        itemId: string;
+        quantity: number;
+        expiresAt?: string;
+        description?: string;
+    })): Promise<void>;
+    testModePurchase(options: {
+        priceId: string;
+        fullCode: string;
+        quantity?: number;
     }): Promise<void>;
 } & StackServerApp<HasTokenStore, ProjectId>);
 declare const StackAdminApp: StackAdminAppConstructor;
@@ -950,6 +984,7 @@ type AdminProject = {
     readonly config: AdminProjectConfig;
     update(this: AdminProject, update: AdminProjectUpdateOptions): Promise<void>;
     delete(this: AdminProject): Promise<void>;
+    transfer(this: AdminProject, user: CurrentUser, newTeamId: string): Promise<void>;
     getConfig(this: AdminProject): Promise<CompleteConfig>;
     useConfig(this: AdminProject): CompleteConfig;
     updateConfig(this: AdminProject, config: EnvironmentConfigOverrideOverride): Promise<void>;
@@ -1073,7 +1108,18 @@ type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>;
         setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void;
     };
-} & AsyncStoreProperty<"project", [], Project, false> & {
+} & AsyncStoreProperty<"project", [], Project, false> & AsyncStoreProperty<"item", [
+    {
+        itemId: string;
+        userId: string;
+    } | {
+        itemId: string;
+        teamId: string;
+    } | {
+        itemId: string;
+        customCustomerId: string;
+    }
+], Item, false> & {
     [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void>;
 });
 declare const StackClientApp: StackClientAppConstructor;

package/dist/lib/auth.js

@@ -32,7 +32,7 @@ var import_results = require("@stackframe/stack-shared/dist/utils/results");
 var import_strings = require("@stackframe/stack-shared/dist/utils/strings");
 var import_url = require("../utils/url.js");
 var import_cookie = require("./cookie.js");
-async function signInWithOAuth(iface, options) {
+async function signInWithOAuth(iface, options, session) {
   const { codeChallenge, state } = await (0, import_cookie.saveVerifierAndState)();
   const location = await iface.getOAuthUrl({
     provider: options.provider,
@@ -41,7 +41,8 @@ async function signInWithOAuth(iface, options) {
     codeChallenge,
     state,
     type: "authenticate",
-    providerScope: options.providerScope
+    providerScope: options.providerScope,
+    session
   });
   window.location.assign(location);
   await (0, import_promises.neverResolve)();

package/dist/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\nimport { KnownError, StackClientInterface } from \"@stackframe/stack-shared\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\nimport { StackAssertionError, throwErr } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { Result } from \"@stackframe/stack-shared/dist/utils/results\";\nimport { deindent } from \"@stackframe/stack-shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  }\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams() {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Stack found an outer OAuth callback state in the query parameters, but not in cookies.\n      \n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Stack.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams();\n  if (!consumed) return Result.ok(undefined);\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,0BAAiD;AAEjD,oBAA8C;AAC9C,sBAA6B;AAC7B,qBAAuB;AACvB,qBAAyB;AACzB,iBAAqC;AACrC,oBAAoE;AAEpE,eAAsB,gBACpB,OACA,SAMA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,aAAa,aAAa;AAAA,IACpE,sBAAkB,iCAAqB,QAAQ,kBAAkB,kBAAkB;AAAA,IACnF;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,aAAa,aAAa;AAAA,IACpE,sBAAkB,iCAAqB,QAAQ,kBAAkB,kBAAkB;AAAA,IACnF,8BAA0B,iCAAqB,OAAO,SAAS,MAAM,0BAA0B;AAAA,IAC/F;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAOA,SAAS,kCAAkC;AACzC,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,cAAQ,KAAK,IAAI,MAAM,uDAAuD,KAAK,2EAA2E,CAAC;AAC/J,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,SAAK,wBAAS,uDAAuD;AAC/H,QAAM,mBAAe,6CAA8B,aAAa;AAEhE,MAAI,CAAC,cAAc;AAGjB,YAAQ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAWZ;AACD,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AAAA,IACL;AAAA,IACA,cAAc,aAAa;AAAA,IAC3B,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,WAAW,gCAAgC;AACjD,MAAI,CAAC,SAAU,QAAO,sBAAO,GAAG,MAAS;AAKzC,MAAI;AACF,WAAO,sBAAO,GAAG,MAAM,MAAM,kBAAkB;AAAA,MAC7C,aAAa,SAAS,YAAY;AAAA,MAClC,iBAAa,iCAAqB,aAAa,aAAa;AAAA,MAC5D,cAAc,SAAS;AAAA,MACvB,OAAO,SAAS;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ,SAAS,GAAG;AACV,QAAI,+BAAW,aAAa,CAAC,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,kCAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}
+{"version":3,"sources":["../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\nimport { KnownError, StackClientInterface } from \"@stackframe/stack-shared\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\nimport { StackAssertionError, throwErr } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { Result } from \"@stackframe/stack-shared/dist/utils/results\";\nimport { deindent } from \"@stackframe/stack-shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n    session,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams() {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Stack found an outer OAuth callback state in the query parameters, but not in cookies.\n      \n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Stack.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams();\n  if (!consumed) return Result.ok(undefined);\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,0BAAiD;AAEjD,oBAA8C;AAC9C,sBAA6B;AAC7B,qBAAuB;AACvB,qBAAyB;AACzB,iBAAqC;AACrC,oBAAoE;AAEpE,eAAsB,gBACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,aAAa,aAAa;AAAA,IACpE,sBAAkB,iCAAqB,QAAQ,kBAAkB,kBAAkB;AAAA,IACnF;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,IACvB;AAAA,EACF,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,aAAa,aAAa;AAAA,IACpE,sBAAkB,iCAAqB,QAAQ,kBAAkB,kBAAkB;AAAA,IACnF,8BAA0B,iCAAqB,OAAO,SAAS,MAAM,0BAA0B;AAAA,IAC/F;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAOA,SAAS,kCAAkC;AACzC,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,cAAQ,KAAK,IAAI,MAAM,uDAAuD,KAAK,2EAA2E,CAAC;AAC/J,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,SAAK,wBAAS,uDAAuD;AAC/H,QAAM,mBAAe,6CAA8B,aAAa;AAEhE,MAAI,CAAC,cAAc;AAGjB,YAAQ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAWZ;AACD,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AAAA,IACL;AAAA,IACA,cAAc,aAAa;AAAA,IAC3B,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,WAAW,gCAAgC;AACjD,MAAI,CAAC,SAAU,QAAO,sBAAO,GAAG,MAAS;AAKzC,MAAI;AACF,WAAO,sBAAO,GAAG,MAAM,MAAM,kBAAkB;AAAA,MAC7C,aAAa,SAAS,YAAY;AAAA,MAClC,iBAAa,iCAAqB,aAAa,aAAa;AAAA,MAC5D,cAAc,SAAS;AAAA,MACvB,OAAO,SAAS;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ,SAAS,GAAG;AACV,QAAI,+BAAW,aAAa,CAAC,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,kCAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}

package/dist/lib/stack-app/apps/implementations/admin-app-impl.js

@@ -94,6 +94,16 @@ var _StackAdminAppImplIncomplete = class extends import_server_app_impl._StackSe
     this._configOverridesCache = (0, import_common2.createCache)(async () => {
       return await this._interface.getConfig();
     });
+    this._stripeAccountInfoCache = (0, import_common2.createCache)(async () => {
+      try {
+        return await this._interface.getStripeAccountInfo();
+      } catch (error) {
+        if (error?.status === 404) {
+          return null;
+        }
+        throw error;
+      }
+    });
   }
   _adminConfigFromCrud(data) {
     return JSON.parse(data.config_string);
@@ -183,6 +193,10 @@ var _StackAdminAppImplIncomplete = class extends import_server_app_impl._StackSe
       async delete() {
         await app._interface.deleteProject();
       },
+      async transfer(user, newTeamId) {
+        await app._interface.transferProject(user._internalSession, newTeamId);
+        await onRefresh();
+      },
       async getProductionModeErrors() {
         return (0, import_production_mode.getProductionModeErrors)(data);
       },
@@ -445,16 +459,9 @@ var _StackAdminAppImplIncomplete = class extends import_server_app_impl._StackSe
   async createStripeWidgetAccountSession() {
     return await this._interface.createStripeWidgetAccountSession();
   }
-  async createPurchaseUrl(options) {
-    return await this._interface.createPurchaseUrl({
-      customer_id: options.customerId,
-      offer_id: options.offerId
-    });
-  }
   async createItemQuantityChange(options) {
     await this._interface.updateItemQuantity(
-      options.customerId,
-      options.itemId,
+      { itemId: options.itemId, ..."userId" in options ? { userId: options.userId } : "teamId" in options ? { teamId: options.teamId } : { customCustomerId: options.customCustomerId } },
       {
         delta: options.quantity,
         expires_at: options.expiresAt,
@@ -462,6 +469,16 @@ var _StackAdminAppImplIncomplete = class extends import_server_app_impl._StackSe
       }
     );
   }
+  async testModePurchase(options) {
+    await this._interface.testModePurchase({ price_id: options.priceId, full_code: options.fullCode, quantity: options.quantity });
+  }
+  async getStripeAccountInfo() {
+    return await this._interface.getStripeAccountInfo();
+  }
+  useStripeAccountInfo() {
+    const data = (0, import_common3.useAsyncCache)(this._stripeAccountInfoCache, [], "useStripeAccountInfo()");
+    return data;
+  }
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {