foundation-sdk 0.2.10 → 0.3.0

package/dist/{types-HdCjnyCt.d.cts → types-BiBc2oYU.d.cts}

@@ -22,7 +22,19 @@ interface EntityChangeEvent {
     namespace?: string;
     timestamp?: number;
 }
-type AuthProvider = (config: Record<string, unknown>) => Promise<AuthClient>;
+interface AuthProviderContext {
+    /** API base URL for backend endpoints */
+    apiBaseUrl: string;
+    /** Account service base URL */
+    accountBaseUrl: string;
+    /** App ID for request headers */
+    appId: string;
+    /** Tenant ID for request headers */
+    tenantId: string;
+    /** App version for request headers */
+    version: string;
+}
+type AuthProvider = (config: Record<string, unknown>, ctx: AuthProviderContext) => Promise<AuthClient>;
 interface FoundationConfig {
     /** Backend config endpoint URL. If omitted, reads from /foundation-env.json */
     configUrl?: string;
@@ -56,14 +68,34 @@ interface FullConfig {
     };
     readonly raw: Record<string, unknown>;
 }
+type SignInStep = 'DONE' | 'CONFIRM_SIGN_UP' | 'CONFIRM_SIGN_IN_WITH_SMS_CODE' | 'CONFIRM_SIGN_IN_WITH_TOTP_CODE' | 'CONTINUE_SIGN_IN_WITH_MFA_SELECTION' | 'RESET_PASSWORD' | 'CONFIRM_SIGN_IN_WITH_NEW_PASSWORD_REQUIRED' | string;
+interface SignInResult {
+    isSignedIn: boolean;
+    nextStep?: {
+        signInStep: SignInStep;
+        [key: string]: unknown;
+    };
+}
+type SignUpStep = 'DONE' | 'CONFIRM_SIGN_UP' | string;
+interface SignUpResult {
+    isSignUpComplete: boolean;
+    userId?: string;
+    nextStep?: {
+        signUpStep: SignUpStep;
+        [key: string]: unknown;
+    };
+}
 interface AuthClient {
     login(options?: Record<string, unknown>): Promise<void>;
     logout(options?: Record<string, unknown>): void | Promise<void>;
     getUser(): Promise<User | undefined>;
     getTokenSilently(options?: Record<string, unknown>): Promise<string>;
     isAuthenticated(): Promise<boolean>;
-    signIn?(email: string, password: string): Promise<void>;
-    signUp?(email: string, password: string, metadata?: Record<string, unknown>): Promise<void>;
+    handleCallback?(url?: string): Promise<void>;
+    signIn?(email: string, password: string): Promise<SignInResult>;
+    signUp?(email: string, password: string, metadata?: Record<string, unknown>): Promise<SignUpResult>;
+    confirmSignUp?(email: string, code: string): Promise<void>;
+    resendSignUpCode?(email: string): Promise<void>;
     forgotPassword?(email: string): Promise<void>;
     resetPassword?(code: string, newPassword: string): Promise<void>;
 }
@@ -74,10 +106,19 @@ interface AuthService {
     /** Redirect-based login (Auth0 Universal Login / Cognito Hosted UI) */
     login(options?: Record<string, unknown>): Promise<void>;
     logout(options?: Record<string, unknown>): Promise<void>;
-    /** Direct sign in with credentials (for custom login forms) */
-    signIn(email: string, password: string): Promise<void>;
-    /** Direct sign up (for custom registration forms) */
-    signUp(email: string, password: string, metadata?: Record<string, unknown>): Promise<void>;
+    /** Direct sign in with credentials (for custom login forms).
+     *  Returns `{ isSignedIn, nextStep? }`. Check `isSignedIn` before navigating. */
+    signIn(email: string, password: string): Promise<SignInResult>;
+    /** Direct sign up (for custom registration forms).
+     *  Returns `{ isSignUpComplete, nextStep? }`. If configured for unified verification,
+     *  `isSignUpComplete` is true and the backend sends a verification email. */
+    signUp(email: string, password: string, metadata?: Record<string, unknown>): Promise<SignUpResult>;
+    /** Confirm sign up with verification code (Cognito email/SMS verification) */
+    confirmSignUp(email: string, code: string): Promise<void>;
+    /** Resend sign up verification code */
+    resendSignUpCode(email: string): Promise<void>;
+    /** Handle OAuth redirect callback — call on your /callback route */
+    handleCallback(url?: string): Promise<void>;
     /** Initiate password reset */
     forgotPassword(email: string): Promise<void>;
     /** Complete password reset with code */
@@ -178,6 +219,32 @@ interface IntegrationService {
     }>;
     disconnect(source: string, configurationId: string): Promise<void>;
 }
+interface OAuthClient {
+    id: string;
+    name: string;
+    description?: string;
+    redirectUris: string[];
+    allowedScopes: string[];
+    grantTypes: string[];
+    status: string;
+    [key: string]: unknown;
+}
+interface OAuthConsentParams {
+    client_id: string;
+    redirect_uri: string;
+    scope: string;
+    state: string;
+    code_challenge: string;
+    code_challenge_method: string;
+}
+interface OAuthService {
+    /** Get an OAuth client's details (for consent screen) */
+    getClient(clientId: string): Promise<OAuthClient>;
+    /** Grant consent and generate authorization code */
+    authorizeConsent(params: OAuthConsentParams): Promise<{
+        code: string;
+    }>;
+}
 interface OpenApiService {
     get(): Promise<Record<string, unknown>>;
 }
@@ -196,9 +263,10 @@ interface Foundation {
     integration: IntegrationService;
     account: AccountService;
     config: FullConfig;
+    oauth: OAuthService;
     openapi: OpenApiService;
     log: LogService;
     on(event: string, callback: (event: EntityChangeEvent) => void): () => void;
 }
 
-export type { AuthClient as A, DbService as D, EntityChangeEvent as E, FoundationConfig as F, IntegrationService as I, LogService as L, OpenApiService as O, User as U, Foundation as a, FullConfig as b, FileMetadata as c, AuthProvider as d, AuthService as e, FilesService as f, AccountService as g, Integration as h, IntegrationConnection as i, IntegrationDetail as j };
+export type { AuthProvider as A, DbService as D, EntityChangeEvent as E, FoundationConfig as F, IntegrationService as I, LogService as L, OAuthService as O, SignInResult as S, User as U, Foundation as a, FullConfig as b, FileMetadata as c, AuthClient as d, AuthService as e, SignInStep as f, SignUpResult as g, SignUpStep as h, FilesService as i, AccountService as j, Integration as k, IntegrationConnection as l, IntegrationDetail as m, OAuthClient as n, OAuthConsentParams as o, OpenApiService as p, AuthProviderContext as q };

package/dist/{types-HdCjnyCt.d.ts → types-BiBc2oYU.d.ts}

@@ -22,7 +22,19 @@ interface EntityChangeEvent {
     namespace?: string;
     timestamp?: number;
 }
-type AuthProvider = (config: Record<string, unknown>) => Promise<AuthClient>;
+interface AuthProviderContext {
+    /** API base URL for backend endpoints */
+    apiBaseUrl: string;
+    /** Account service base URL */
+    accountBaseUrl: string;
+    /** App ID for request headers */
+    appId: string;
+    /** Tenant ID for request headers */
+    tenantId: string;
+    /** App version for request headers */
+    version: string;
+}
+type AuthProvider = (config: Record<string, unknown>, ctx: AuthProviderContext) => Promise<AuthClient>;
 interface FoundationConfig {
     /** Backend config endpoint URL. If omitted, reads from /foundation-env.json */
     configUrl?: string;
@@ -56,14 +68,34 @@ interface FullConfig {
     };
     readonly raw: Record<string, unknown>;
 }
+type SignInStep = 'DONE' | 'CONFIRM_SIGN_UP' | 'CONFIRM_SIGN_IN_WITH_SMS_CODE' | 'CONFIRM_SIGN_IN_WITH_TOTP_CODE' | 'CONTINUE_SIGN_IN_WITH_MFA_SELECTION' | 'RESET_PASSWORD' | 'CONFIRM_SIGN_IN_WITH_NEW_PASSWORD_REQUIRED' | string;
+interface SignInResult {
+    isSignedIn: boolean;
+    nextStep?: {
+        signInStep: SignInStep;
+        [key: string]: unknown;
+    };
+}
+type SignUpStep = 'DONE' | 'CONFIRM_SIGN_UP' | string;
+interface SignUpResult {
+    isSignUpComplete: boolean;
+    userId?: string;
+    nextStep?: {
+        signUpStep: SignUpStep;
+        [key: string]: unknown;
+    };
+}
 interface AuthClient {
     login(options?: Record<string, unknown>): Promise<void>;
     logout(options?: Record<string, unknown>): void | Promise<void>;
     getUser(): Promise<User | undefined>;
     getTokenSilently(options?: Record<string, unknown>): Promise<string>;
     isAuthenticated(): Promise<boolean>;
-    signIn?(email: string, password: string): Promise<void>;
-    signUp?(email: string, password: string, metadata?: Record<string, unknown>): Promise<void>;
+    handleCallback?(url?: string): Promise<void>;
+    signIn?(email: string, password: string): Promise<SignInResult>;
+    signUp?(email: string, password: string, metadata?: Record<string, unknown>): Promise<SignUpResult>;
+    confirmSignUp?(email: string, code: string): Promise<void>;
+    resendSignUpCode?(email: string): Promise<void>;
     forgotPassword?(email: string): Promise<void>;
     resetPassword?(code: string, newPassword: string): Promise<void>;
 }
@@ -74,10 +106,19 @@ interface AuthService {
     /** Redirect-based login (Auth0 Universal Login / Cognito Hosted UI) */
     login(options?: Record<string, unknown>): Promise<void>;
     logout(options?: Record<string, unknown>): Promise<void>;
-    /** Direct sign in with credentials (for custom login forms) */
-    signIn(email: string, password: string): Promise<void>;
-    /** Direct sign up (for custom registration forms) */
-    signUp(email: string, password: string, metadata?: Record<string, unknown>): Promise<void>;
+    /** Direct sign in with credentials (for custom login forms).
+     *  Returns `{ isSignedIn, nextStep? }`. Check `isSignedIn` before navigating. */
+    signIn(email: string, password: string): Promise<SignInResult>;
+    /** Direct sign up (for custom registration forms).
+     *  Returns `{ isSignUpComplete, nextStep? }`. If configured for unified verification,
+     *  `isSignUpComplete` is true and the backend sends a verification email. */
+    signUp(email: string, password: string, metadata?: Record<string, unknown>): Promise<SignUpResult>;
+    /** Confirm sign up with verification code (Cognito email/SMS verification) */
+    confirmSignUp(email: string, code: string): Promise<void>;
+    /** Resend sign up verification code */
+    resendSignUpCode(email: string): Promise<void>;
+    /** Handle OAuth redirect callback — call on your /callback route */
+    handleCallback(url?: string): Promise<void>;
     /** Initiate password reset */
     forgotPassword(email: string): Promise<void>;
     /** Complete password reset with code */
@@ -178,6 +219,32 @@ interface IntegrationService {
     }>;
     disconnect(source: string, configurationId: string): Promise<void>;
 }
+interface OAuthClient {
+    id: string;
+    name: string;
+    description?: string;
+    redirectUris: string[];
+    allowedScopes: string[];
+    grantTypes: string[];
+    status: string;
+    [key: string]: unknown;
+}
+interface OAuthConsentParams {
+    client_id: string;
+    redirect_uri: string;
+    scope: string;
+    state: string;
+    code_challenge: string;
+    code_challenge_method: string;
+}
+interface OAuthService {
+    /** Get an OAuth client's details (for consent screen) */
+    getClient(clientId: string): Promise<OAuthClient>;
+    /** Grant consent and generate authorization code */
+    authorizeConsent(params: OAuthConsentParams): Promise<{
+        code: string;
+    }>;
+}
 interface OpenApiService {
     get(): Promise<Record<string, unknown>>;
 }
@@ -196,9 +263,10 @@ interface Foundation {
     integration: IntegrationService;
     account: AccountService;
     config: FullConfig;
+    oauth: OAuthService;
     openapi: OpenApiService;
     log: LogService;
     on(event: string, callback: (event: EntityChangeEvent) => void): () => void;
 }
 
-export type { AuthClient as A, DbService as D, EntityChangeEvent as E, FoundationConfig as F, IntegrationService as I, LogService as L, OpenApiService as O, User as U, Foundation as a, FullConfig as b, FileMetadata as c, AuthProvider as d, AuthService as e, FilesService as f, AccountService as g, Integration as h, IntegrationConnection as i, IntegrationDetail as j };
+export type { AuthProvider as A, DbService as D, EntityChangeEvent as E, FoundationConfig as F, IntegrationService as I, LogService as L, OAuthService as O, SignInResult as S, User as U, Foundation as a, FullConfig as b, FileMetadata as c, AuthClient as d, AuthService as e, SignInStep as f, SignUpResult as g, SignUpStep as h, FilesService as i, AccountService as j, Integration as k, IntegrationConnection as l, IntegrationDetail as m, OAuthClient as n, OAuthConsentParams as o, OpenApiService as p, AuthProviderContext as q };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "foundation-sdk",
-  "version": "0.2.10",
+  "version": "0.3.0",
   "description": "TypeScript SDK for Foundation",
   "type": "module",
   "main": "./dist/index.cjs",