@timeback/sdk 0.1.5 → 0.1.7

package/README.md

@@ -40,7 +40,7 @@ bun add timeback
 
 ## Server Adapters
 
-All server adapters use the same core configuration:
+All server adapters use the same core configuration and require a `timeback.config.json` file:
 
 ```typescript
 // lib/timeback.ts
@@ -420,7 +420,7 @@ The SDK resolves the Timeback user by email. You only need to provide the authen
 If you only need Timeback SSO authentication without activity tracking or Timeback API integration, use `createTimebackIdentity()`. This is a lightweight alternative that:
 
 - Does not require Timeback API credentials
-- Does not require `timeback.config.ts`
+- Does not require `timeback.config.json`
 - Only exposes identity routes (sign-in, callback, sign-out)
 - Returns raw OIDC user info (no Timeback profile enrichment)
 
@@ -429,8 +429,8 @@ If you only need Timeback SSO authentication without activity tracking or Timeba
 ### Cloudflare Workers / workerd compatibility
 
 `createTimebackIdentity()` is runtime-agnostic, but the main `timeback` entrypoint also includes
-Node-oriented functionality (notably config loading via `jiti`). Some edge runtimes
-(Cloudflare Workers / workerd) do not support the Node modules that `jiti` depends on.
+Node-oriented functionality (notably config loading via `c12`). Some edge runtimes
+(Cloudflare Workers / workerd) do not support the Node modules that `c12` depends on.
 
 If you're deploying identity-only SSO on Workers/workerd, import from the worker-safe entrypoint:
 
@@ -542,7 +542,7 @@ await activity.end({
 
 The SDK automatically sends activity data to your server, which forwards it to the Timeback API.
 
-**Note:** Activity ingestion requires an **effective Caliper sensor URL per course** in `timeback.config.ts`.
+**Note:** Activity ingestion requires an **effective Caliper sensor URL per course** in `timeback.config.json`.
 
 Sensor precedence (highest → lowest):
 
@@ -550,24 +550,23 @@ Sensor precedence (highest → lowest):
 - per-course base override: `course.sensor`
 - top-level default: `config.sensor`
 
-```typescript
-export default {
-	name: 'My App',
-	sensor: 'https://my-app.example.com/sensors/default',
-	courses: [
+```json
+{
+	"$schema": "https://timeback.dev/schema.json",
+	"name": "My App",
+	"sensor": "https://my-app.example.com/sensors/default",
+	"courses": [
 		{
-			subject: 'Math',
-			grade: 3,
-			courseCode: 'MATH-3',
-			// Base override (all envs)
-			sensor: 'https://my-app.example.com/sensors/math',
-			// Env-specific overrides (applied when syncing/editing in that env)
-			overrides: {
-				staging: { sensor: 'https://staging.my-app.example.com/sensors/math' },
-				production: { sensor: 'https://my-app.example.com/sensors/math' },
-			},
-		},
-	],
+			"subject": "Math",
+			"grade": 3,
+			"courseCode": "MATH-3",
+			"sensor": "https://my-app.example.com/sensors/math",
+			"overrides": {
+				"staging": { "sensor": "https://staging.my-app.example.com/sensors/math" },
+				"production": { "sensor": "https://my-app.example.com/sensors/math" }
+			}
+		}
+	]
 }
 ```
 

package/dist/client/adapters/react/hooks/types.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Verification state for the current user.
+ */
+export type TimebackVerificationState = {
+    status: 'loading';
+} | {
+    status: 'verified';
+    timebackId: string;
+} | {
+    status: 'unverified';
+} | {
+    status: 'error';
+    message: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/client/adapters/react/hooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/client/adapters/react/hooks/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAClC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA"}

package/dist/client/adapters/react/hooks/useTimebackVerification.d.ts

@@ -0,0 +1,18 @@
+import type { TimebackVerificationState } from './types';
+/**
+ * Verify the current user against Timeback.
+ *
+ * The hook runs automatically once the Timeback client is available, and
+ * provides a `refresh()` method to retry.
+ *
+ * @param options - Hook options
+ * @param options.enabled - If false, the hook does nothing and stays in loading state.
+ * @returns Verification state and a refresh method
+ */
+export declare function useTimebackVerification(options?: {
+    enabled?: boolean;
+}): {
+    state: TimebackVerificationState;
+    refresh: () => void;
+};
+//# sourceMappingURL=useTimebackVerification.d.ts.map

package/dist/client/adapters/react/hooks/useTimebackVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTimebackVerification.d.ts","sourceRoot":"","sources":["../../../../../src/client/adapters/react/hooks/useTimebackVerification.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAsFxD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG;IAC7E,KAAK,EAAE,yBAAyB,CAAA;IAChC,OAAO,EAAE,MAAM,IAAI,CAAA;CACnB,CA6DA"}

package/dist/client/adapters/react/index.d.ts

@@ -40,6 +40,8 @@ export { createClient } from '../../timeback-client';
 export { TimebackClient } from '../../timeback-client.class';
 export { Activity } from '../../lib/activity';
 export { TimebackProvider, useTimeback } from './provider';
+export { useTimebackVerification } from './hooks/useTimebackVerification';
+export type { TimebackVerificationState } from './hooks/types';
 export { SignInButton } from './SignInButton';
 export type { SignInButtonProps } from './SignInButton';
 export type { TimebackIdentity, ActivityParams, ActivityMetrics } from '../../../shared/types';

package/dist/client/adapters/react/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/client/adapters/react/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAG5D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAG7C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/client/adapters/react/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAG5D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAG7C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,YAAY,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAA;AAG9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/client/adapters/react/index.js

@@ -8,7 +8,8 @@ var ROUTES = {
     CALLBACK: "/identity/callback"
   },
   USER: {
-    ME: "/user/me"
+    ME: "/user/me",
+    VERIFY: "/user/verify"
   }
 };
 
@@ -23,6 +24,15 @@ function getDefaultBaseURL() {
   return `${window.location.origin}${DEFAULT_BASE_PATH}`;
 }
 
+// src/client/lib/fetch.ts
+function getDefaultFetch() {
+  const globalFetch = typeof globalThis === "undefined" ? undefined : globalThis.fetch;
+  if (!globalFetch) {
+    return;
+  }
+  return (input, init) => globalThis.fetch(input, init);
+}
+
 // src/client/lib/activity/activity.class.ts
 class Activity {
   params;
@@ -128,14 +138,16 @@ class Auth {
 // src/client/namespaces/user.ts
 class User {
   getBaseURL;
-  constructor(getBaseURL) {
+  fetchImpl;
+  constructor(getBaseURL, fetchImpl) {
     this.getBaseURL = getBaseURL;
+    this.fetchImpl = fetchImpl;
   }
   async fetch() {
     if (!isBrowser()) {
       throw new Error("user.fetch() requires a browser environment");
     }
-    const response = await fetch(`${this.getBaseURL()}${ROUTES.USER.ME}`, {
+    const response = await this.fetchImpl(`${this.getBaseURL()}${ROUTES.USER.ME}`, {
       method: "GET",
       credentials: "include"
     });
@@ -145,6 +157,24 @@ class User {
     }
     return response.json();
   }
+  async verify() {
+    if (!isBrowser()) {
+      throw new Error("user.verify() requires a browser environment");
+    }
+    const response = await this.fetchImpl(`${this.getBaseURL()}${ROUTES.USER.VERIFY}`, {
+      method: "GET",
+      credentials: "include"
+    });
+    if (!response.ok) {
+      const errorResponse = await response.json().catch(() => ({ error: "Unknown error" }));
+      throw new Error(errorResponse.error ?? "Failed to verify Timeback user");
+    }
+    const data = await response.json();
+    if (data.verified && data.timebackId) {
+      return { verified: true, timebackId: data.timebackId };
+    }
+    return { verified: false };
+  }
 }
 // src/client/timeback-client.class.ts
 class TimebackClient {
@@ -152,11 +182,19 @@ class TimebackClient {
   auth;
   user;
   _baseURL;
+  _fetch;
   constructor(config = {}) {
     this._baseURL = config.baseURL;
+    const baseFetch = config.fetch ?? getDefaultFetch();
+    if (!baseFetch) {
+      throw new Error("TimebackClient requires a fetch implementation. " + "Provide `fetch` in the constructor config for non-browser runtimes.");
+    }
+    const rawPlugins = config.plugins;
+    const plugins = Array.isArray(rawPlugins) ? rawPlugins : rawPlugins ? [rawPlugins] : [];
+    this._fetch = plugins.reduce((f, p) => p.wrapFetch(f), baseFetch);
     this.activity = new ActivityManager((payload) => this.sendActivity(payload));
     this.auth = new Auth(() => this.baseURL);
-    this.user = new User(() => this.baseURL);
+    this.user = new User(() => this.baseURL, this._fetch);
   }
   get baseURL() {
     if (!this._baseURL) {
@@ -169,7 +207,7 @@ class TimebackClient {
     return this._baseURL;
   }
   async sendActivity(payload) {
-    const response = await fetch(`${this.baseURL}${ROUTES.ACTIVITY}`, {
+    const response = await this._fetch(`${this.baseURL}${ROUTES.ACTIVITY}`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(payload),
@@ -185,7 +223,11 @@ class TimebackClient {
 // src/client/timeback-client.ts
 function createClient(config = {}) {
   const baseURL = config.baseURL ?? getDefaultBaseURL();
-  return new TimebackClient({ baseURL });
+  return new TimebackClient({
+    baseURL,
+    fetch: config.fetch,
+    plugins: config.plugins
+  });
 }
 // src/client/adapters/react/provider.tsx
 import * as React from "react";
@@ -216,8 +258,95 @@ function TimebackProvider({
 function useTimeback() {
   return React.useContext(TimebackContext);
 }
-// src/client/adapters/react/SignInButton.tsx
+// src/client/adapters/react/hooks/useTimebackVerification.ts
 import * as React2 from "react";
+var VERIFY_CACHE_TTL_MS = 1500;
+var verifyInFlight = new WeakMap;
+var verifyCache = new WeakMap;
+function isCacheFresh(entry) {
+  return !!entry && Date.now() - entry.atMs < VERIFY_CACHE_TTL_MS;
+}
+function toState(result) {
+  return result.verified ? { status: "verified", timebackId: result.timebackId } : { status: "unverified" };
+}
+async function verifyOnce(timeback, force) {
+  if (!force) {
+    const cached = verifyCache.get(timeback);
+    if (isCacheFresh(cached)) {
+      return cached.result;
+    }
+    const existing = verifyInFlight.get(timeback);
+    if (existing) {
+      return await existing;
+    }
+  }
+  const p = timeback.user.verify().then((result) => {
+    if (verifyInFlight.get(timeback) === p) {
+      verifyCache.set(timeback, { atMs: Date.now(), result });
+    }
+    return result;
+  });
+  verifyInFlight.set(timeback, p);
+  try {
+    return await p;
+  } finally {
+    if (verifyInFlight.get(timeback) === p) {
+      verifyInFlight.delete(timeback);
+    }
+  }
+}
+function useTimebackVerification(options = {}) {
+  const timeback = useTimeback();
+  const enabled = options.enabled ?? true;
+  const [state, setState] = React2.useState({ status: "loading" });
+  const [refreshNonce, setRefreshNonce] = React2.useState(0);
+  const lastHandledRefreshNonceRef = React2.useRef(0);
+  const refresh = React2.useCallback(() => {
+    setRefreshNonce((n) => n + 1);
+  }, []);
+  React2.useEffect(() => {
+    if (!enabled)
+      return;
+    let cancelled = false;
+    const force = refreshNonce > lastHandledRefreshNonceRef.current;
+    if (timeback && !force) {
+      const cached = verifyCache.get(timeback);
+      if (isCacheFresh(cached)) {
+        setState(toState(cached.result));
+        return () => {
+          cancelled = true;
+        };
+      }
+    }
+    setState({ status: "loading" });
+    (async () => {
+      try {
+        if (!timeback)
+          return;
+        if (force) {
+          lastHandledRefreshNonceRef.current = refreshNonce;
+        }
+        const result = await verifyOnce(timeback, force);
+        if (cancelled)
+          return;
+        setState(toState(result));
+      } catch (err) {
+        if (!cancelled) {
+          setState({
+            status: "error",
+            message: err instanceof Error ? err.message : "Failed to verify Timeback user"
+          });
+        }
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [enabled, refreshNonce, timeback]);
+  return { state, refresh };
+}
+// src/client/adapters/react/SignInButton.tsx
+import * as React3 from "react";
 import { jsx as jsx2, jsxs } from "react/jsx-runtime";
 function TimebackLogo({ className }) {
   return /* @__PURE__ */ jsxs("svg", {
@@ -426,9 +555,9 @@ function SignInButton(props) {
     showLogo = true
   } = props;
   const timeback = useTimeback();
-  const [isLoading, setIsLoading] = React2.useState(false);
+  const [isLoading, setIsLoading] = React3.useState(false);
   const isReady = !!timeback;
-  React2.useEffect(() => {
+  React3.useEffect(() => {
     injectStyles();
   }, []);
   const handleClick = (e) => {
@@ -466,6 +595,7 @@ function SignInButton(props) {
   });
 }
 export {
+  useTimebackVerification,
   useTimeback,
   createClient,
   TimebackProvider,

package/dist/client/auth/bearer.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Bearer Auth Plugin
+ *
+ * Adds `Authorization: Bearer <token>` to SDK requests.
+ */
+import type { BearerAuthOptions, TimebackClientPlugin } from './types';
+/**
+ * Create an auth plugin that attaches a Bearer token.
+ *
+ * This intentionally throws when no token is available so we never "silently"
+ * send an unauthenticated request that then 401s (terrible DX in dev + prod).
+ *
+ * @param options - The options for the bearer auth plugin.
+ * @returns The bearer auth plugin.
+ */
+export declare function bearer(options: BearerAuthOptions): TimebackClientPlugin;
+//# sourceMappingURL=bearer.d.ts.map

package/dist/client/auth/bearer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../src/client/auth/bearer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAiB,MAAM,SAAS,CAAA;AAErF;;;;;;;;GAQG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,oBAAoB,CAuBvE"}

package/dist/client/auth/index.d.ts

@@ -0,0 +1,3 @@
+export type { BearerAuthOptions, TimebackClientPlugin, TimebackFetch } from './types';
+export { bearer } from './bearer';
+//# sourceMappingURL=index.d.ts.map

package/dist/client/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA"}

package/dist/client/auth/types.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Client Auth Types
+ *
+ * Small, framework-agnostic extension point for customizing how the SDK makes HTTP requests.
+ */
+export type TimebackFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * Auth plugin that can wrap the SDK's fetch implementation.
+ *
+ * Example use cases:
+ * - Add `Authorization: Bearer <token>` for resource-server architectures (Auth0 SPA + FastAPI)
+ * - Add custom headers (e.g. trace IDs) to all SDK requests
+ */
+export interface TimebackClientPlugin {
+    /**
+     * Wrap a fetch implementation and return a new one.
+     */
+    wrapFetch(fetch: TimebackFetch): TimebackFetch;
+}
+/**
+ * Options for Bearer auth plugin.
+ */
+export interface BearerAuthOptions {
+    /**
+     * Return the current access token (e.g. Auth0 getAccessTokenSilently()).
+     *
+     * Return undefined if the user is not authenticated yet.
+     */
+    getToken: () => Promise<string | undefined> | string | undefined;
+    /**
+     * Header name to set. Defaults to `Authorization`.
+     */
+    headerName?: string;
+    /**
+     * Optional prefix. Defaults to `Bearer `.
+     */
+    prefix?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/client/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/auth/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACpC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAAA;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAAA;IAEhE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CACf"}

package/dist/client/index.d.ts

@@ -5,5 +5,7 @@
  */
 export { createClient } from './timeback-client';
 export { TimebackClient } from './timeback-client.class';
+export { bearer } from './auth';
+export type { BearerAuthOptions, TimebackClientPlugin, TimebackFetch } from './auth';
 export { Activity } from './lib/activity';
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGxD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGxD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAA;AAGpF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/client/lib/fetch.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Fetch Utilities
+ *
+ * Helpers for selecting a safe fetch implementation across runtimes.
+ */
+import type { TimebackFetch } from '../auth/types';
+/**
+ * Get a safe default fetch implementation.
+ *
+ * Some runtimes (notably Safari/WebKit) can throw "Illegal invocation" if the
+ * global `fetch` is called unbound (e.g. stored in a variable then invoked).
+ *
+ * This function returns a wrapper that always calls `fetch` via property access
+ * on `globalThis`, preserving the correct receiver.
+ *
+ * @returns The default fetch implementation.
+ */
+export declare function getDefaultFetch(): TimebackFetch | undefined;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/client/lib/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/client/lib/fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,aAAa,GAAG,SAAS,CAQ3D"}

package/dist/client/namespaces/user.d.ts

@@ -3,18 +3,21 @@
  *
  * User identity and profile data.
  */
-import type { TimebackProfile } from '../../shared/types';
+import type { TimebackProfile, TimebackVerifyResult } from '../../shared/types';
+import type { TimebackFetch } from '../auth/types';
 /**
  * User namespace for profile data.
  */
 export declare class User {
     private readonly getBaseURL;
+    private readonly fetchImpl;
     /**
      * Create user instance.
      *
      * @param getBaseURL - Function that returns the base URL for API routes
+     * @param fetchImpl - Fetch implementation to use for requests
      */
-    constructor(getBaseURL: () => string);
+    constructor(getBaseURL: () => string, fetchImpl: TimebackFetch);
     /**
      * Fetch the full user profile from the Timeback API.
      *
@@ -25,5 +28,25 @@ export declare class User {
      * @throws Error if not authenticated or API call fails
      */
     fetch(): Promise<TimebackProfile>;
+    /**
+     * Verify if the current user exists in Timeback.
+     *
+     * Use this to check eligibility before enabling Timeback-gated features
+     * (e.g., free tier for Timeback users in a partner app).
+     *
+     * @returns Verification result with eligibility status and timebackId if eligible
+     * @throws Error if not authenticated or API call fails unexpectedly
+     *
+     * @example
+     * ```typescript
+     * const result = await timeback.user.verify()
+     * if (result.verified) {
+     *   console.log('Timeback user:', result.timebackId)
+     * } else {
+     *   console.log('Not a Timeback user')
+     * }
+     * ```
+     */
+    verify(): Promise<TimebackVerifyResult>;
 }
 //# sourceMappingURL=user.d.ts.map

package/dist/client/namespaces/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/client/namespaces/user.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEzD;;GAEG;AACH,qBAAa,IAAI;IAMJ,OAAO,CAAC,QAAQ,CAAC,UAAU;IALvC;;;;OAIG;IACH,YAA6B,UAAU,EAAE,MAAM,MAAM,EAAI;IAEzD;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC,CAoBtC;CACD"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/client/namespaces/user.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD;;GAEG;AACH,qBAAa,IAAI;IAQf,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAR3B;;;;;OAKG;IACH,YACkB,UAAU,EAAE,MAAM,MAAM,EACxB,SAAS,EAAE,aAAa,EACtC;IAEJ;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC,CAoBtC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC,CA0B5C;CACD"}

package/dist/client/timeback-client.class.d.ts

@@ -4,12 +4,26 @@
  * Client-side SDK for activity tracking and identity.
  */
 import { ActivityManager, Auth, User } from './namespaces';
+import type { TimebackClientPlugin, TimebackFetch } from './auth/types';
 /**
  * Timeback client configuration.
  */
 interface TimebackClientConfig {
     /** Base URL for Timeback API routes. Defaults to window.location.origin + '/api/timeback' */
     baseURL?: string;
+    /**
+     * Fetch implementation used by the client.
+     *
+     * Defaults to the global `fetch` when available.
+     */
+    fetch?: TimebackFetch;
+    /**
+     * Optional plugin(s) that can wrap the client fetch.
+     *
+     * Use this to attach Bearer tokens (Auth0 SPA PKCE) without monkey-patching
+     * global `window.fetch`.
+     */
+    plugins?: TimebackClientPlugin | TimebackClientPlugin[];
 }
 /**
  * Timeback client for activity tracking and identity.
@@ -19,6 +33,7 @@ export declare class TimebackClient {
     readonly auth: Auth;
     readonly user: User;
     private _baseURL;
+    private readonly _fetch;
     /**
      * Create a new Timeback client.
      *

package/dist/client/timeback-client.class.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timeback-client.class.d.ts","sourceRoot":"","sources":["../../src/client/timeback-client.class.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAI1D;;GAEG;AACH,UAAU,oBAAoB;IAC7B,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,qBAAa,cAAc;IAC1B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,OAAO,CAAC,QAAQ,CAAoB;IAEpC;;;;OAIG;IACH,YAAY,MAAM,GAAE,oBAAyB,EAK5C;IAED;;;;OAIG;IACH,OAAO,KAAK,OAAO,GAYlB;YAOa,YAAY;CAiB1B"}
+{"version":3,"file":"timeback-client.class.d.ts","sourceRoot":"","sources":["../../src/client/timeback-client.class.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAG1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEvE;;GAEG;AACH,UAAU,oBAAoB;IAC7B,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAA;CACvD;AAED;;GAEG;AACH,qBAAa,cAAc;IAC1B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC;;;;OAIG;IACH,YAAY,MAAM,GAAE,oBAAyB,EAmB5C;IAED;;;;OAIG;IACH,OAAO,KAAK,OAAO,GAYlB;YAOa,YAAY;CAiB1B"}

package/dist/client/timeback-client.d.ts

@@ -4,6 +4,7 @@
  * Factory function for creating Timeback client instances.
  */
 import { TimebackClient } from './timeback-client.class';
+import type { TimebackClientPlugin, TimebackFetch } from './auth/types';
 /**
  * Create a Timeback client instance.
  *
@@ -25,5 +26,7 @@ import { TimebackClient } from './timeback-client.class';
  */
 export declare function createClient(config?: {
     baseURL?: string;
+    fetch?: TimebackFetch;
+    plugins?: TimebackClientPlugin | TimebackClientPlugin[];
 }): TimebackClient;
 //# sourceMappingURL=timeback-client.d.ts.map

package/dist/client/timeback-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timeback-client.d.ts","sourceRoot":"","sources":["../../src/client/timeback-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,cAAc,CAG9E"}
+{"version":3,"file":"timeback-client.d.ts","sourceRoot":"","sources":["../../src/client/timeback-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAC3B,MAAM,GAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAA;CAClD,GACJ,cAAc,CAOhB"}

package/dist/client.d.ts

@@ -26,5 +26,6 @@
  */
 export { createClient, TimebackClient } from './client/index';
 export { Activity } from './client/index';
-export type { TimebackIdentity, TimebackProfile, TimebackSessionUser, ActivityParams, ActivityMetrics, } from './shared/types';
+export { bearer } from './client/auth/bearer';
+export type { TimebackIdentity, TimebackProfile, TimebackSessionUser, TimebackVerifyResult, ActivityParams, ActivityMetrics, } from './shared/types';
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,YAAY,EACX,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,eAAe,GACf,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,YAAY,EACX,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,eAAe,GACf,MAAM,gBAAgB,CAAA"}