@trymellon/js 1.3.2 → 1.3.4

package/dist/react.d.cts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-Dwut7nw8.cjs';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-B9rvhe53.cjs';
 
 declare function TryMellonProvider(props: {
     client: TryMellon;

package/dist/react.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-Dwut7nw8.js';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-B9rvhe53.js';
 
 declare function TryMellonProvider(props: {
     client: TryMellon;

package/dist/{trymellon-Dwut7nw8.d.cts → trymellon-B9rvhe53.d.cts}

@@ -55,6 +55,12 @@ type TryMellonConfig = {
      * Only used when sandbox is true.
      */
     sandboxToken?: string;
+    /**
+     * Origin to send in the Origin header for WebAuthn and cross-device API calls.
+     * If not set, the SDK uses window.location.origin in browser environments.
+     * Set this in Node or when the document origin is not the correct one (e.g. SSR).
+     */
+    origin?: string;
 };
 interface RegisterOptions {
     /**
@@ -133,13 +139,32 @@ type CrossDeviceStatusResult = {
     user_id?: string;
     session_token?: string;
 };
-type CrossDeviceContextResult = {
+/** Context for auth: request options (get). */
+type CrossDeviceContextAuth = {
+    type: 'auth';
     options: AuthStartResponse['challenge'];
 };
+/** Context for registration: creation options (create). */
+type CrossDeviceContextRegistration = {
+    type: 'registration';
+    options: RegisterStartResponse['challenge'];
+};
+/**
+ * Contract: response of getCrossDeviceContext.
+ * Single source of truth for branching in approve(): use context.type to decide
+ * whether to run credentials.get (auth) or credentials.create (registration).
+ * Validators must return only CrossDeviceContextAuth | CrossDeviceContextRegistration.
+ */
+type CrossDeviceContextResult = CrossDeviceContextAuth | CrossDeviceContextRegistration;
 type CrossDeviceVerifyRequest = {
     session_id: string;
     credential: AuthFinishRequest['credential'];
 };
+/** Same shape as RegisterFinishRequest; used for POST verify-registration. */
+type CrossDeviceVerifyRegistrationRequest = {
+    session_id: string;
+    credential: RegisterFinishRequest['credential'];
+};
 type RegisterStartRequest = {
     external_user_id: string;
 };
@@ -373,9 +398,19 @@ declare class ApiClient {
     registerOnboardingPasskey(sessionId: string, request: OnboardingRegisterPasskeyRequest): Promise<Result<OnboardingRegisterPasskeyResponse, TryMellonError>>;
     completeOnboarding(sessionId: string, request: OnboardingCompleteRequest): Promise<Result<OnboardingCompleteResponse, TryMellonError>>;
     initCrossDeviceAuth(): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
+    initCrossDeviceRegistration(options: {
+        externalUserId: string;
+    }): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
     getCrossDeviceStatus(sessionId: string): Promise<Result<CrossDeviceStatusResult, TryMellonError>>;
+    /**
+     * Fetches WebAuthn options for the cross-device session.
+     * Contract: response is CrossDeviceContextResult (auth | registration).
+     * Use result.value.type to branch: 'auth' → credentials.get + verify;
+     * 'registration' → credentials.create + verify-registration.
+     */
     getCrossDeviceContext(sessionId: string): Promise<Result<CrossDeviceContextResult, TryMellonError>>;
     verifyCrossDeviceAuth(request: CrossDeviceVerifyRequest): Promise<Result<void, TryMellonError>>;
+    verifyCrossDeviceRegistration(request: CrossDeviceVerifyRegistrationRequest): Promise<Result<void, TryMellonError>>;
 }
 
 declare class OnboardingManager {
@@ -428,6 +463,9 @@ declare class TryMellon {
     auth: {
         crossDevice: {
             init: () => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
+            initRegistration: (options: {
+                externalUserId: string;
+            }) => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
             waitForSession: (sessionId: string, signal?: AbortSignal) => Promise<Result<{
                 session_token: string;
                 user_id: string;

package/dist/{trymellon-Dwut7nw8.d.ts → trymellon-B9rvhe53.d.ts}

@@ -55,6 +55,12 @@ type TryMellonConfig = {
      * Only used when sandbox is true.
      */
     sandboxToken?: string;
+    /**
+     * Origin to send in the Origin header for WebAuthn and cross-device API calls.
+     * If not set, the SDK uses window.location.origin in browser environments.
+     * Set this in Node or when the document origin is not the correct one (e.g. SSR).
+     */
+    origin?: string;
 };
 interface RegisterOptions {
     /**
@@ -133,13 +139,32 @@ type CrossDeviceStatusResult = {
     user_id?: string;
     session_token?: string;
 };
-type CrossDeviceContextResult = {
+/** Context for auth: request options (get). */
+type CrossDeviceContextAuth = {
+    type: 'auth';
     options: AuthStartResponse['challenge'];
 };
+/** Context for registration: creation options (create). */
+type CrossDeviceContextRegistration = {
+    type: 'registration';
+    options: RegisterStartResponse['challenge'];
+};
+/**
+ * Contract: response of getCrossDeviceContext.
+ * Single source of truth for branching in approve(): use context.type to decide
+ * whether to run credentials.get (auth) or credentials.create (registration).
+ * Validators must return only CrossDeviceContextAuth | CrossDeviceContextRegistration.
+ */
+type CrossDeviceContextResult = CrossDeviceContextAuth | CrossDeviceContextRegistration;
 type CrossDeviceVerifyRequest = {
     session_id: string;
     credential: AuthFinishRequest['credential'];
 };
+/** Same shape as RegisterFinishRequest; used for POST verify-registration. */
+type CrossDeviceVerifyRegistrationRequest = {
+    session_id: string;
+    credential: RegisterFinishRequest['credential'];
+};
 type RegisterStartRequest = {
     external_user_id: string;
 };
@@ -373,9 +398,19 @@ declare class ApiClient {
     registerOnboardingPasskey(sessionId: string, request: OnboardingRegisterPasskeyRequest): Promise<Result<OnboardingRegisterPasskeyResponse, TryMellonError>>;
     completeOnboarding(sessionId: string, request: OnboardingCompleteRequest): Promise<Result<OnboardingCompleteResponse, TryMellonError>>;
     initCrossDeviceAuth(): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
+    initCrossDeviceRegistration(options: {
+        externalUserId: string;
+    }): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
     getCrossDeviceStatus(sessionId: string): Promise<Result<CrossDeviceStatusResult, TryMellonError>>;
+    /**
+     * Fetches WebAuthn options for the cross-device session.
+     * Contract: response is CrossDeviceContextResult (auth | registration).
+     * Use result.value.type to branch: 'auth' → credentials.get + verify;
+     * 'registration' → credentials.create + verify-registration.
+     */
     getCrossDeviceContext(sessionId: string): Promise<Result<CrossDeviceContextResult, TryMellonError>>;
     verifyCrossDeviceAuth(request: CrossDeviceVerifyRequest): Promise<Result<void, TryMellonError>>;
+    verifyCrossDeviceRegistration(request: CrossDeviceVerifyRegistrationRequest): Promise<Result<void, TryMellonError>>;
 }
 
 declare class OnboardingManager {
@@ -428,6 +463,9 @@ declare class TryMellon {
     auth: {
         crossDevice: {
             init: () => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
+            initRegistration: (options: {
+                externalUserId: string;
+            }) => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
             waitForSession: (sessionId: string, signal?: AbortSignal) => Promise<Result<{
                 session_token: string;
                 user_id: string;

package/dist/vue.d.cts

@@ -1,5 +1,5 @@
 import { InjectionKey, Ref } from 'vue';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-Dwut7nw8.cjs';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-B9rvhe53.cjs';
 
 declare const TryMellonKey: InjectionKey<TryMellon>;
 declare function provideTryMellon(client: TryMellon): void;

package/dist/vue.d.ts

@@ -1,5 +1,5 @@
 import { InjectionKey, Ref } from 'vue';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-Dwut7nw8.js';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-B9rvhe53.js';
 
 declare const TryMellonKey: InjectionKey<TryMellon>;
 declare function provideTryMellon(client: TryMellon): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trymellon/js",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "SDK oficial de TryMellon para integrar autenticación passwordless con Passkeys / WebAuthn",
   "type": "module",
   "main": "./dist/index.cjs",