@tempoxyz/auth 0.0.0-pr-87.sha-459d55d → 0.0.0-pr-87.sha-cf6fb2e

package/dist/Actions.d.ts

@@ -14,6 +14,7 @@ export * as email from './actions/email.ts';
 export * as oauth from './actions/oauth.ts';
 export * as passkey from './actions/passkey.ts';
 export * as provider from './actions/provider.ts';
+export * as realm from './actions/realm.ts';
 export * as redirect from './actions/redirect.ts';
 export * as tempoAccount from './actions/tempoAccount.ts';
 /**

package/dist/Actions.js

@@ -6,6 +6,7 @@ export * as email from './actions/email.js';
 export * as oauth from './actions/oauth.js';
 export * as passkey from './actions/passkey.js';
 export * as provider from './actions/provider.js';
+export * as realm from './actions/realm.js';
 export * as redirect from './actions/redirect.js';
 export * as tempoAccount from './actions/tempoAccount.js';
 /**

package/dist/Auth.d.ts

@@ -87,7 +87,7 @@ export declare namespace RequestError {
         uri?: string | undefined;
     };
     /** Each refusal's stable name. `docs/errors.md` explains each one. */
-    type Reason = 'already_decided' | 'approval_pending' | 'body_too_large' | 'challenge_not_permitted' | 'cross_site_request' | 'device_code_expired' | 'duplicate_limit' | 'empty_limits' | 'empty_scopes' | 'expiry_exceeds_maximum' | 'expiry_passed' | 'foreign_account' | 'foreign_origin' | 'invalid_chain' | 'invalid_code' | 'invalid_expiry' | 'invalid_field' | 'invalid_origin' | 'invalid_period' | 'invalid_public_key' | 'limit_exceeds_maximum' | 'malformed_body' | 'missing_code_challenge' | 'missing_key' | 'missing_recipients' | 'passkey_not_permitted' | 'polling_too_fast' | 'rate_limited' | 'rejected' | 'request_denied' | 'scope_without_limit' | 'session_required' | 'unexpected' | 'unknown_code' | 'unknown_endpoint' | 'unsupported_call' | 'unsupported_step' | 'unsupported_token' | 'upstream_unavailable' | 'webauthn_rejected' | 'webauthn_required';
+    type Reason = 'already_decided' | 'approval_pending' | 'body_too_large' | 'challenge_not_permitted' | 'cross_site_request' | 'device_code_expired' | 'duplicate_limit' | 'empty_limits' | 'empty_scopes' | 'expiry_exceeds_maximum' | 'expiry_passed' | 'foreign_account' | 'foreign_origin' | 'invalid_chain' | 'invalid_code' | 'invalid_expiry' | 'invalid_field' | 'invalid_origin' | 'invalid_period' | 'invalid_public_key' | 'limit_exceeds_maximum' | 'malformed_body' | 'missing_code_challenge' | 'missing_key' | 'missing_recipients' | 'passkey_not_permitted' | 'polling_too_fast' | 'rate_limited' | 'realm_not_permitted' | 'rejected' | 'request_denied' | 'scope_without_limit' | 'session_required' | 'unexpected' | 'unknown_code' | 'unknown_endpoint' | 'unsupported_call' | 'unsupported_step' | 'unsupported_token' | 'upstream_unavailable' | 'webauthn_rejected' | 'webauthn_required';
 }
 /** A client's {@link Account} read before a sign-in set it, or after sign-out emptied it. */
 export declare class SignedOutError extends Error {

package/dist/Decorator.d.ts

@@ -111,6 +111,10 @@ export declare namespace tempoAuth {
                 /** `Actions.provider.signIn`. */
                 signIn: (options: Actions.provider.signIn.Options) => void;
             };
+            realm: {
+                /** `Actions.realm.list`. */
+                list: () => Promise<Actions.realm.list.ReturnType>;
+            };
             redirect: {
                 /** `Actions.redirect.complete`, which sets the client's account. */
                 complete: (options?: Actions.redirect.complete.Options) => Promise<Actions.redirect.complete.ReturnType>;
@@ -140,7 +144,7 @@ export declare namespace tempoAuth {
             signOut: () => Promise<void>;
             tempoAccount: {
                 /** `Actions.tempoAccount.create`. */
-                create: () => Promise<Actions.tempoAccount.create.ReturnType>;
+                create: (options?: Actions.tempoAccount.create.Options) => Promise<Actions.tempoAccount.create.ReturnType>;
                 /** `Actions.tempoAccount.list`. */
                 list: () => Promise<Actions.tempoAccount.list.ReturnType>;
             };

package/dist/Decorator.js

@@ -156,6 +156,9 @@ export function tempoAuth(options) {
                     list: () => Actions.provider.list(auth),
                     signIn: (options) => Actions.provider.signIn(auth, options),
                 },
+                realm: {
+                    list: () => Actions.realm.list(auth),
+                },
                 redirect: {
                     async complete(options = {}) {
                         const change = begin();
@@ -192,7 +195,7 @@ export function tempoAuth(options) {
                     await Actions.signOut(auth);
                 },
                 tempoAccount: {
-                    create: () => Actions.tempoAccount.create(auth),
+                    create: (options) => Actions.tempoAccount.create(auth, options),
                     list: () => Actions.tempoAccount.list(auth),
                 },
             },

package/dist/actions/realm.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Lists the realms the app reaches: the sets of Tempo Accounts its settings name.
+ * @module
+ */
+import type { Auth } from '../Auth.ts';
+/**
+ * Lists the realms the app reaches, in its settings' order. The first holds the accounts
+ * `Actions.tempoAccount.create` adds unless it names another.
+ *
+ * @example
+ * ```ts
+ * const realms = await Actions.realm.list(auth)
+ * // [{ id: 'default', name: 'Tempo', passkeys: true }]
+ * ```
+ */
+export declare function list(auth: Auth): Promise<list.ReturnType>;
+export declare namespace list {
+    type ReturnType = readonly {
+        /** The realm ID, such as `default` or `tempo-cash`, which `Actions.tempoAccount.create` takes. */
+        id: string;
+        /** The realm's display name, such as `Tempo Cash`. */
+        name: string;
+        /** Whether passkeys own accounts in the realm. Only the default realm holds them. */
+        passkeys: boolean;
+    }[];
+}

package/dist/actions/realm.js

@@ -0,0 +1,15 @@
+import * as Api from '../internal/api.js';
+/**
+ * Lists the realms the app reaches, in its settings' order. The first holds the accounts
+ * `Actions.tempoAccount.create` adds unless it names another.
+ *
+ * @example
+ * ```ts
+ * const realms = await Actions.realm.list(auth)
+ * // [{ id: 'default', name: 'Tempo', passkeys: true }]
+ * ```
+ */
+export async function list(auth) {
+    const { realms } = await Api.json(await (auth.fetch ?? fetch)(new URL(`/v1/realms?${new URLSearchParams({ client_id: auth.clientId })}`, auth.url)));
+    return realms;
+}

package/dist/actions/tempoAccount.d.ts

@@ -5,19 +5,26 @@
 import type { Auth } from '../Auth.ts';
 import type { TempoAccount } from '../TempoAccount.ts';
 /**
- * Creates another Tempo Account for the signed-in user with the app's settings, and returns it. Pass
- * its `address` as the `access` of an access key to authorize keys on it.
+ * Creates another Tempo Account for the signed-in user, in `realm` or the app's first realm, and
+ * returns it. Pass its `address` as the `access` of an access key to authorize keys on it.
  *
  * @example
  * ```ts
- * const tempoAccount = await Actions.tempoAccount.create(auth)
+ * const tempoAccount = await Actions.tempoAccount.create(auth, { realm: 'tempo-cash' })
  * await Actions.authorize(auth, {
  *   accessKey: { ...accessKey, account: tempoAccount.address },
  * })
  * ```
  */
-export declare function create(auth: Auth): Promise<create.ReturnType>;
+export declare function create(auth: Auth, options?: create.Options): Promise<create.ReturnType>;
 export declare namespace create {
+    type Options = {
+        /**
+         * The realm that holds the account, one that `Actions.realm.list` returns. Defaults to the app's
+         * first realm.
+         */
+        realm?: string | undefined;
+    };
     /** The new account. */
     type ReturnType = TempoAccount;
 }

package/dist/actions/tempoAccount.js

@@ -1,18 +1,18 @@
 import * as Api from '../internal/api.js';
 /**
- * Creates another Tempo Account for the signed-in user with the app's settings, and returns it. Pass
- * its `address` as the `access` of an access key to authorize keys on it.
+ * Creates another Tempo Account for the signed-in user, in `realm` or the app's first realm, and
+ * returns it. Pass its `address` as the `access` of an access key to authorize keys on it.
  *
  * @example
  * ```ts
- * const tempoAccount = await Actions.tempoAccount.create(auth)
+ * const tempoAccount = await Actions.tempoAccount.create(auth, { realm: 'tempo-cash' })
  * await Actions.authorize(auth, {
  *   accessKey: { ...accessKey, account: tempoAccount.address },
  * })
  * ```
  */
-export async function create(auth) {
-    return Api.tempoAccount(await Api.json(await Api.post(auth, `/v1/account/tempo?${new URLSearchParams({ client_id: auth.clientId })}`, { json: {} })));
+export async function create(auth, options = {}) {
+    return Api.tempoAccount(await Api.json(await Api.post(auth, `/v1/account/tempo?${new URLSearchParams({ client_id: auth.clientId })}`, { json: options.realm ? { realm: options.realm } : {} })));
 }
 /**
  * Lists the signed-in user's Tempo Accounts that the app's settings include, their default first: the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tempoxyz/auth",
-  "version": "0.0.0-pr-87.sha-459d55d",
+  "version": "0.0.0-pr-87.sha-cf6fb2e",
   "description": "Signs users in to Tempo through Tempo Auth, and returns Viem access key accounts on their Tempo Accounts.",
   "type": "module",
   "exports": {