cauthy-auth 0.20.0 → 0.23.0

package/dist/{system-ZD_Wa8Bm.d.mts → system-BxMsSIu1.d.mts}

@@ -192,6 +192,8 @@ interface SessionUser {
     emailVerifyBy?: string;
     /** The language the person reads in ("es", "en-US"), when Cauthy knows it. */
     locale?: string;
+    /** A guest: a visitor's session before they sign up. No email; `account.upgrade` makes it an account, keeping `id`. */
+    isAnonymous?: boolean;
 }
 /** A value JSON can carry. What crosses from server to browser is typed as this, never `unknown`. */
 type JsonValue = string | number | boolean | null | JsonValue[] | {

package/dist/{system-DhRr_WxR.d.ts → system-DTIeDXDP.d.ts}

@@ -192,6 +192,8 @@ interface SessionUser {
     emailVerifyBy?: string;
     /** The language the person reads in ("es", "en-US"), when Cauthy knows it. */
     locale?: string;
+    /** A guest: a visitor's session before they sign up. No email; `account.upgrade` makes it an account, keeping `id`. */
+    isAnonymous?: boolean;
 }
 /** A value JSON can carry. What crosses from server to browser is typed as this, never `unknown`. */
 type JsonValue = string | number | boolean | null | JsonValue[] | {

package/dist/vue.d.mts

@@ -1,8 +1,8 @@
 import { ShallowRef, Plugin } from 'vue';
 import { SessionStore, SessionState, SessionStoreOptions, AuthClient } from './client.mjs';
 export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind, SSOConnection } from './client.mjs';
-import { i as PublicSession } from './system-ZD_Wa8Bm.mjs';
-export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-ZD_Wa8Bm.mjs';
+import { i as PublicSession } from './system-BxMsSIu1.mjs';
+export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-BxMsSIu1.mjs';
 import './theme.mjs';
 import './validate-B_iC-4y8.mjs';
 import 'jose';

package/dist/vue.d.ts

@@ -1,8 +1,8 @@
 import { ShallowRef, Plugin } from 'vue';
 import { SessionStore, SessionState, SessionStoreOptions, AuthClient } from './client.js';
 export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind, SSOConnection } from './client.js';
-import { i as PublicSession } from './system-DhRr_WxR.js';
-export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-DhRr_WxR.js';
+import { i as PublicSession } from './system-DTIeDXDP.js';
+export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-DTIeDXDP.js';
 import './theme.js';
 import './validate-B_iC-4y8.js';
 import 'jose';

package/dist/vue.js

@@ -231,6 +231,7 @@ function createAuthClient(options = {}) {
       return null;
     }
   }
+  const upgradeUrl = (provider, o = {}) => `${base}/me/upgrade/social/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const linkUrl = (provider, o = {}) => `${base}/me/identities/link/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const socialUrl = (provider, o = {}) => `${base}/sign-in/social/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const ssoUrl = (target, o = {}) => {
@@ -268,10 +269,40 @@ function createAuthClient(options = {}) {
   }
   return {
     signIn: {
+      anonymously: (f = {}) => post("/sign-in/anonymous", {}, null, f.captchaToken),
       email: (f) => post("/sign-in/email", { email: f.email, password: f.password }, firstProblem(checkEmail(f.email), checkPassword(f.password)), f.captchaToken),
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
       mfaSendCode: () => post("/sign-in/mfa/send", {}, null),
+      mfaPush: () => post("/sign-in/mfa/push", {}, null),
+      async mfaPushWait(o = {}) {
+        const status = await new Promise((resolve) => {
+          if (typeof EventSource !== "function") return resolve("approved");
+          const source = new EventSource(`${base}/sign-in/mfa/push/events`, { withCredentials: true });
+          const stop = (st) => {
+            source.close();
+            resolve(st);
+          };
+          o.signal?.addEventListener("abort", () => stop("aborted"));
+          source.addEventListener("status", (e) => {
+            const st = (() => {
+              try {
+                return String(JSON.parse(e.data).status);
+              } catch {
+                return "";
+              }
+            })();
+            if (st && st !== "pending") stop(st);
+          });
+          source.onerror = () => {
+            if (source.readyState === EventSource.CLOSED) stop("expired");
+          };
+        });
+        if (status === "aborted") return { ok: false, error: { code: "aborted", message: "Stopped waiting." } };
+        if (status === "denied") return { ok: false, error: { code: "push_denied", message: "The sign-in was turned down on the phone." } };
+        if (status === "expired") return { ok: false, error: { code: "push_expired", message: "Nobody answered on the phone in time." } };
+        return post("/sign-in/mfa/push/finish", {}, null);
+      },
       magicLink: (f) => post("/sign-in/magic-link", { email: f.email, ...f.create ? { create: true } : {}, ...f.returnTo ? { returnTo: f.returnTo } : {} }, checkEmail(f.email), f.captchaToken),
       magicLinkVerify: (f) => post("/sign-in/magic-link/verify", { token: f.token }, null),
       emailCode: (f) => post("/sign-in/email-code", { code: f.code }, checkCode(f.code)),
@@ -365,6 +396,24 @@ function createAuthClient(options = {}) {
     resetPassword: (f) => post("/reset-password", { token: f.token, password: f.password }, checkNewPassword(f.password)),
     verifyEmail: (f) => post("/verify-email", { token: f.token }, null),
     signOut: () => post("/sign-out", {}, null),
+    organizations: {
+      async list(system) {
+        const body = await read(`/me/organizations${system ? `?system=${encodeURIComponent(system)}` : ""}`);
+        return body && Array.isArray(body.organizations) ? body.organizations : [];
+      },
+      async members(id) {
+        const body = await read(`/me/organizations/members?id=${encodeURIComponent(id)}`);
+        return body && Array.isArray(body.members) ? body.members : null;
+      },
+      async roles(id) {
+        const body = await read(`/me/organizations/roles?id=${encodeURIComponent(id)}`);
+        return body && Array.isArray(body.roles) ? body.roles : null;
+      },
+      add: (id, f) => post("/me/organizations/members/add", { organizationId: id, email: f.email, role: f.role, name: f.name ?? "", locale: f.locale ?? "" }, checkEmail(f.email)),
+      setRole: (id, userId, role) => post("/me/organizations/members/role", { organizationId: id, userId, role }, null),
+      remove: (id, userId) => post("/me/organizations/members/remove", { organizationId: id, userId }, null),
+      inviteAgain: (id, userId, f = {}) => post("/me/organizations/members/invite", { organizationId: id, userId, locale: f.locale ?? "" }, null)
+    },
     account: {
       async get() {
         const body = await read("/me");
@@ -403,6 +452,11 @@ function createAuthClient(options = {}) {
         return body && Array.isArray(body.sessions) ? body.sessions : [];
       },
       signOutEverywhere: () => post("/me/sessions/end", {}, null),
+      upgrade: (f) => post("/me/upgrade", { email: f.email, password: f.password, name: f.name ?? "" }, firstProblem(checkName(f.name), checkEmail(f.email), checkNewPassword(f.password))),
+      upgradeUrl,
+      upgradeWith(provider, o) {
+        window.location.assign(upgradeUrl(provider, o));
+      },
       async agents() {
         const body = await read("/me/agents");
         return body && Array.isArray(body.agents) ? body.agents : [];