@terminal3/t3n-sdk 5.20.0 → 5.21.0

package/dist/index.d.ts

@@ -3074,6 +3074,14 @@ declare class T3nClient {
      */
     private finalizedPayload;
     private did;
+    /**
+     * Address the last OIDC login proved, read from its `Finish` reply.
+     * `null` when the login proved none — the claim its provider row governs
+     * carried no usable address — which is the case that still needs
+     * `otpRequest` / `otpVerify` before `submitUserInput`.
+     * Exposed through {@link getProvenEmail}.
+     */
+    private provenEmail;
     private handshakeResult;
     constructor(config: T3nClientConfig);
     /**
@@ -3130,7 +3138,9 @@ declare class T3nClient {
      * Validates the `oidc_auth_action` tag before reading `did`: a decodable but
      * non-`Finish` reply is reported as such rather than silently misread as a
      * missing DID (which would discard whatever the server actually said). Returns
-     * the session {@link Did}.
+     * the session {@link Did}, and records the reply's `proven_email` — absent on
+     * the workload reply and on any node older than the field — for
+     * {@link getProvenEmail}.
      */
     private parseFinishDid;
     /**
@@ -4290,6 +4300,14 @@ declare class T3nClient {
     getSessionId(): SessionId | null;
     getStatus(): SessionStatus;
     getDid(): Did | null;
+    /**
+     * The address the last OIDC login proved, or `null` if it proved none.
+     *
+     * Lets a caller prompt for an address at the point of entry rather than
+     * discovering it is missing from an `email_not_verified` refusal on
+     * `submitUserInput`. A node older than this field always reports `null`.
+     */
+    getProvenEmail(): string | null;
     getLastSetCookie(): string | null;
     getLastResponseHeaders(): Record<string, string>;
     isAuthenticated(): boolean;