@~lyre/auth 0.10.0 → 0.11.0

package/dist/admin.d.ts

@@ -89,7 +89,13 @@ interface ProfileFieldSpec {
 /** Whether an email can be invited to an app. See `checkInviteEmail`. */
 interface InviteEmailCheck {
     email: string;
-    /** `member` = already has app access; `invited` = a live invite exists; `available` = go ahead. */
+    /**
+     * `member` = already in scope; `invited` = a live invite exists; `available` = go ahead.
+     *
+     * SCOPE depends on whether `userGroupId` was passed: with one, each state is about that
+     * WORKSPACE; without, about the app as a whole. For a multi-workspace app the app-level answer is
+     * usually the wrong one — someone in another workspace is not a member of this one.
+     */
     state: 'member' | 'invited' | 'available';
     /** Whether an Accounts user already exists for this address (they keep their own profile). */
     hasAccount: boolean;
@@ -252,7 +258,9 @@ declare class AccountsAdmin {
      * BEFORE submitting that someone is already a member or already invited. Email only, exact match.
      * Session-authed.
      */
-    checkInviteEmail(appSlug: string, email: string): Promise<InviteEmailCheck>;
+    checkInviteEmail(appSlug: string, email: string, opts?: {
+        userGroupId?: string | null;
+    }): Promise<InviteEmailCheck>;
     /**
      * A workspace's own details — name plus its app-scoped profile values (support email, …).
      * Service-key authed (`stats:read`). Pass `appId` to scope the profile values.

package/dist/admin.js

@@ -103,10 +103,12 @@ var AccountsAdmin = class {
    * BEFORE submitting that someone is already a member or already invited. Email only, exact match.
    * Session-authed.
    */
-  async checkInviteEmail(appSlug, email) {
+  async checkInviteEmail(appSlug, email, opts) {
+    const query = new URLSearchParams({ email });
+    if (opts?.userGroupId) query.set("userGroupId", opts.userGroupId);
     return this.request(
       "GET",
-      `/api/auth/apps/${encodeURIComponent(appSlug)}/invites/lookup?email=${encodeURIComponent(email)}`,
+      `/api/auth/apps/${encodeURIComponent(appSlug)}/invites/lookup?${query.toString()}`,
       { auth: "session" }
     );
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@~lyre/auth",
-  "version": "0.10.0",
-  "description": "Shared Axis Accounts auth SDK — framework-agnostic session/identity core (HMAC-signed cookies, accounts login/callback/logout) plus an optional turnkey SvelteKit adapter.",
+  "version": "0.11.0",
+  "description": "Shared Axis Accounts auth SDK \u2014 framework-agnostic session/identity core (HMAC-signed cookies, accounts login/callback/logout) plus an optional turnkey SvelteKit adapter.",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",