@trymellon/js 1.7.6 → 2.0.0

package/dist/react.d.cts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-NM6i2RKa.cjs';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-P7BPxIry.cjs';
 
 declare function TryMellonProvider(props: {
     client: TryMellon;

package/dist/react.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-NM6i2RKa.js';
+import { T as TryMellon, R as Result, a as RegisterResult, b as TryMellonError, c as RegisterOptions, A as AuthenticateResult, d as AuthenticateOptions } from './trymellon-P7BPxIry.js';
 
 declare function TryMellonProvider(props: {
     client: TryMellon;

package/dist/{trymellon-NM6i2RKa.d.cts → trymellon-P7BPxIry.d.cts}

@@ -98,18 +98,34 @@ type ClientStatus = {
     recommendedFlow: 'passkey' | 'fallback';
 };
 type TryMellonEvent = 'start' | 'success' | 'error' | 'cancelled';
+/** User info in success event (aligns with API user payload). */
+type SuccessEventUserInfo = {
+    userId: string;
+    externalUserId?: string;
+    email?: string;
+    metadata?: Record<string, unknown>;
+};
+/** Success payload: token always present (03-eventos-seguridad). Nonce when flow generates it. */
+type SuccessEventPayload = {
+    type: 'success';
+    operation: 'register' | 'authenticate';
+    token: string;
+    user?: SuccessEventUserInfo;
+    nonce?: string;
+};
 type EventPayload = {
     type: 'start';
     operation: 'register' | 'authenticate';
-} | {
-    type: 'success';
-    operation: 'register' | 'authenticate';
-} | {
+    nonce?: string;
+} | SuccessEventPayload | {
     type: 'error';
     error: TryMellonError;
+    operation?: 'register' | 'authenticate';
+    nonce?: string;
 } | {
     type: 'cancelled';
     operation: 'register' | 'authenticate';
+    nonce?: string;
 };
 type EventHandler = (payload: EventPayload) => void;
 type EmailFallbackStartOptions = {
@@ -141,6 +157,8 @@ type RecoveryCompleteResponse = {
         metadata?: Record<string, unknown>;
     };
     credential_id: string;
+    /** Set when successUrl was passed and allowed by application allowlist. */
+    redirect_url?: string;
 };
 type RecoverAccountOptions = {
     /** The external user ID of the account being recovered. */
@@ -163,6 +181,8 @@ interface RecoverAccountResult {
         email?: string;
         metadata?: Record<string, unknown>;
     };
+    /** Set when successUrl was passed and allowed by application allowlist. */
+    redirectUrl?: string;
 }
 type OnboardingStartOptions = {
     user_role: 'maintainer' | 'app_user';
@@ -180,11 +200,15 @@ type CrossDeviceInitResult = {
     expires_at: string;
     /** Opaque token; send in X-Polling-Token header when calling GET status. Not included in qr_url. */
     polling_token: string;
+    /** Set when backend returns it (e.g. after anonymous init-registration). */
+    external_user_id?: string;
 };
 type CrossDeviceStatusResult = {
     status: 'pending' | 'authenticated' | 'completed';
     user_id?: string;
     session_token?: string;
+    /** Set when backend allows redirect; returned in GET cross-device/status when status=completed. */
+    redirect_url?: string;
 };
 /** Context for auth: request options (get). */
 type CrossDeviceContextAuth = {
@@ -316,7 +340,7 @@ interface AuthFinishResponse {
         email?: string;
         metadata?: Record<string, unknown>;
     };
-    signals: {
+    signals?: {
         userVerification?: boolean;
         backupEligible?: boolean;
         backupStatus?: boolean;
@@ -329,8 +353,8 @@ interface RegisterResult {
     success: true;
     credentialId: string;
     /**
-     * Alias para compatibilidad con versiones anteriores que usaban snake_case.
-     * Preferir `credentialId` en código nuevo.
+     * Alias for backward compatibility with snake_case.
+     * Prefer `credentialId` in new code.
      */
     credential_id?: string;
     status: string;
@@ -465,8 +489,8 @@ declare class ApiClient {
     registerOnboardingPasskey(sessionId: string, request: OnboardingRegisterPasskeyRequest): Promise<Result<OnboardingRegisterPasskeyResponse, TryMellonError>>;
     completeOnboarding(sessionId: string, request: OnboardingCompleteRequest): Promise<Result<OnboardingCompleteResponse, TryMellonError>>;
     initCrossDeviceAuth(): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
-    initCrossDeviceRegistration(options: {
-        externalUserId: string;
+    initCrossDeviceRegistration(options?: {
+        externalUserId?: string;
     }): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
     getCrossDeviceStatus(sessionId: string, pollingToken?: string | null): Promise<Result<CrossDeviceStatusResult, TryMellonError>>;
     /**
@@ -494,7 +518,7 @@ declare class OnboardingManager {
      */
     startFlow(options: OnboardingStartOptions & {
         company_name?: string;
-    }): Promise<Result<OnboardingCompleteResult, TryMellonError>>;
+    }, signal?: AbortSignal): Promise<Result<OnboardingCompleteResult, TryMellonError>>;
 }
 
 declare class TryMellon {
@@ -504,11 +528,13 @@ declare class TryMellon {
     private eventEmitter;
     private telemetrySender;
     private crossDeviceManager;
+    private authService;
+    private recoveryService;
     onboarding: OnboardingManager;
     /**
-     * Configura una nueva instancia de TryMellon.
-     * Valida la configuración y retorna un Result.
-     * @param config Configuración del SDK
+     * Creates a new TryMellon instance.
+     * Validates config and returns a Result.
+     * @param config SDK configuration
      */
     static create(config: TryMellonConfig): Result<TryMellon, TryMellonError>;
     /**
@@ -517,11 +543,6 @@ declare class TryMellon {
      */
     constructor(config: TryMellonConfig);
     static isSupported(): boolean;
-    /**
-     * Returns a successful Result for sandbox mode (register or authenticate).
-     * Single place for sandbox contract; used by register() and authenticate().
-     */
-    private sandboxAuthResult;
     register(options: RegisterOptions): Promise<Result<RegisterResult, TryMellonError>>;
     authenticate(options: AuthenticateOptions): Promise<Result<AuthenticateResult, TryMellonError>>;
     validateSession(sessionToken: string): Promise<Result<SessionValidateResponse, TryMellonError>>;
@@ -537,12 +558,13 @@ declare class TryMellon {
     auth: {
         crossDevice: {
             init: () => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
-            initRegistration: (options: {
-                externalUserId: string;
+            initRegistration: (options?: {
+                externalUserId?: string;
             }) => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
             waitForSession: (sessionId: string, signal?: AbortSignal, pollingToken?: string | null) => Promise<Result<{
                 session_token: string;
                 user_id: string;
+                redirectUrl?: string;
             }, TryMellonError>>;
             getContext: (sessionId: string) => Promise<Result<CrossDeviceContextResult, TryMellonError>>;
             approve: (sessionId: string) => Promise<Result<void, TryMellonError>>;

package/dist/{trymellon-NM6i2RKa.d.ts → trymellon-P7BPxIry.d.ts}

@@ -98,18 +98,34 @@ type ClientStatus = {
     recommendedFlow: 'passkey' | 'fallback';
 };
 type TryMellonEvent = 'start' | 'success' | 'error' | 'cancelled';
+/** User info in success event (aligns with API user payload). */
+type SuccessEventUserInfo = {
+    userId: string;
+    externalUserId?: string;
+    email?: string;
+    metadata?: Record<string, unknown>;
+};
+/** Success payload: token always present (03-eventos-seguridad). Nonce when flow generates it. */
+type SuccessEventPayload = {
+    type: 'success';
+    operation: 'register' | 'authenticate';
+    token: string;
+    user?: SuccessEventUserInfo;
+    nonce?: string;
+};
 type EventPayload = {
     type: 'start';
     operation: 'register' | 'authenticate';
-} | {
-    type: 'success';
-    operation: 'register' | 'authenticate';
-} | {
+    nonce?: string;
+} | SuccessEventPayload | {
     type: 'error';
     error: TryMellonError;
+    operation?: 'register' | 'authenticate';
+    nonce?: string;
 } | {
     type: 'cancelled';
     operation: 'register' | 'authenticate';
+    nonce?: string;
 };
 type EventHandler = (payload: EventPayload) => void;
 type EmailFallbackStartOptions = {
@@ -141,6 +157,8 @@ type RecoveryCompleteResponse = {
         metadata?: Record<string, unknown>;
     };
     credential_id: string;
+    /** Set when successUrl was passed and allowed by application allowlist. */
+    redirect_url?: string;
 };
 type RecoverAccountOptions = {
     /** The external user ID of the account being recovered. */
@@ -163,6 +181,8 @@ interface RecoverAccountResult {
         email?: string;
         metadata?: Record<string, unknown>;
     };
+    /** Set when successUrl was passed and allowed by application allowlist. */
+    redirectUrl?: string;
 }
 type OnboardingStartOptions = {
     user_role: 'maintainer' | 'app_user';
@@ -180,11 +200,15 @@ type CrossDeviceInitResult = {
     expires_at: string;
     /** Opaque token; send in X-Polling-Token header when calling GET status. Not included in qr_url. */
     polling_token: string;
+    /** Set when backend returns it (e.g. after anonymous init-registration). */
+    external_user_id?: string;
 };
 type CrossDeviceStatusResult = {
     status: 'pending' | 'authenticated' | 'completed';
     user_id?: string;
     session_token?: string;
+    /** Set when backend allows redirect; returned in GET cross-device/status when status=completed. */
+    redirect_url?: string;
 };
 /** Context for auth: request options (get). */
 type CrossDeviceContextAuth = {
@@ -316,7 +340,7 @@ interface AuthFinishResponse {
         email?: string;
         metadata?: Record<string, unknown>;
     };
-    signals: {
+    signals?: {
         userVerification?: boolean;
         backupEligible?: boolean;
         backupStatus?: boolean;
@@ -329,8 +353,8 @@ interface RegisterResult {
     success: true;
     credentialId: string;
     /**
-     * Alias para compatibilidad con versiones anteriores que usaban snake_case.
-     * Preferir `credentialId` en código nuevo.
+     * Alias for backward compatibility with snake_case.
+     * Prefer `credentialId` in new code.
      */
     credential_id?: string;
     status: string;
@@ -465,8 +489,8 @@ declare class ApiClient {
     registerOnboardingPasskey(sessionId: string, request: OnboardingRegisterPasskeyRequest): Promise<Result<OnboardingRegisterPasskeyResponse, TryMellonError>>;
     completeOnboarding(sessionId: string, request: OnboardingCompleteRequest): Promise<Result<OnboardingCompleteResponse, TryMellonError>>;
     initCrossDeviceAuth(): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
-    initCrossDeviceRegistration(options: {
-        externalUserId: string;
+    initCrossDeviceRegistration(options?: {
+        externalUserId?: string;
     }): Promise<Result<CrossDeviceInitResult, TryMellonError>>;
     getCrossDeviceStatus(sessionId: string, pollingToken?: string | null): Promise<Result<CrossDeviceStatusResult, TryMellonError>>;
     /**
@@ -494,7 +518,7 @@ declare class OnboardingManager {
      */
     startFlow(options: OnboardingStartOptions & {
         company_name?: string;
-    }): Promise<Result<OnboardingCompleteResult, TryMellonError>>;
+    }, signal?: AbortSignal): Promise<Result<OnboardingCompleteResult, TryMellonError>>;
 }
 
 declare class TryMellon {
@@ -504,11 +528,13 @@ declare class TryMellon {
     private eventEmitter;
     private telemetrySender;
     private crossDeviceManager;
+    private authService;
+    private recoveryService;
     onboarding: OnboardingManager;
     /**
-     * Configura una nueva instancia de TryMellon.
-     * Valida la configuración y retorna un Result.
-     * @param config Configuración del SDK
+     * Creates a new TryMellon instance.
+     * Validates config and returns a Result.
+     * @param config SDK configuration
      */
     static create(config: TryMellonConfig): Result<TryMellon, TryMellonError>;
     /**
@@ -517,11 +543,6 @@ declare class TryMellon {
      */
     constructor(config: TryMellonConfig);
     static isSupported(): boolean;
-    /**
-     * Returns a successful Result for sandbox mode (register or authenticate).
-     * Single place for sandbox contract; used by register() and authenticate().
-     */
-    private sandboxAuthResult;
     register(options: RegisterOptions): Promise<Result<RegisterResult, TryMellonError>>;
     authenticate(options: AuthenticateOptions): Promise<Result<AuthenticateResult, TryMellonError>>;
     validateSession(sessionToken: string): Promise<Result<SessionValidateResponse, TryMellonError>>;
@@ -537,12 +558,13 @@ declare class TryMellon {
     auth: {
         crossDevice: {
             init: () => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
-            initRegistration: (options: {
-                externalUserId: string;
+            initRegistration: (options?: {
+                externalUserId?: string;
             }) => Promise<Result<CrossDeviceInitResult, TryMellonError>>;
             waitForSession: (sessionId: string, signal?: AbortSignal, pollingToken?: string | null) => Promise<Result<{
                 session_token: string;
                 user_id: string;
+                redirectUrl?: string;
             }, TryMellonError>>;
             getContext: (sessionId: string) => Promise<Result<CrossDeviceContextResult, TryMellonError>>;
             approve: (sessionId: string) => Promise<Result<void, TryMellonError>>;