hydrousdb 1.1.0

package/dist/auth/index.js

@@ -0,0 +1,220 @@
+'use strict';
+
+// src/auth/client.ts
+var AuthClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  get path() {
+    return `/auth/${this.http.bucketKey}`;
+  }
+  // ── Sign-up ────────────────────────────────────────────────────────────────
+  /**
+   * Create a new user account. Returns the user and a session immediately.
+   *
+   * @example
+   * const { data, session } = await db.auth.signUp({
+   *   email: 'alice@example.com',
+   *   password: 'Str0ngP@ss!',
+   *   fullName: 'Alice Smith',
+   * });
+   * // Store session.sessionId and session.refreshToken in your app
+   */
+  async signUp(payload, opts) {
+    return this.http.post(`${this.path}/signup`, payload, opts);
+  }
+  // ── Sign-in ────────────────────────────────────────────────────────────────
+  /**
+   * Authenticate with email + password. Returns user data and a new session.
+   *
+   * @example
+   * const { data, session } = await db.auth.signIn({
+   *   email: 'alice@example.com',
+   *   password: 'Str0ngP@ss!',
+   * });
+   */
+  async signIn(payload, opts) {
+    return this.http.post(`${this.path}/signin`, payload, opts);
+  }
+  // ── Sign-out ───────────────────────────────────────────────────────────────
+  /**
+   * Revoke a session (or all sessions for a user).
+   *
+   * @example
+   * // Single device
+   * await db.auth.signOut({ sessionId: 'sess_...' });
+   *
+   * // All devices
+   * await db.auth.signOut({ allDevices: true, userId: 'user_...' });
+   */
+  async signOut(payload, opts) {
+    return this.http.post(`${this.path}/signout`, payload, opts);
+  }
+  // ── Session: validate ──────────────────────────────────────────────────────
+  /**
+   * Validate a session token — use this on every protected request in your backend.
+   *
+   * @example
+   * try {
+   *   const { data } = await db.auth.validateSession(sessionId);
+   *   // data is the authenticated user
+   * } catch (err) {
+   *   // Session expired or invalid
+   * }
+   */
+  async validateSession(sessionId, opts) {
+    return this.http.post(`${this.path}/session/validate`, { sessionId }, opts);
+  }
+  // ── Session: refresh ───────────────────────────────────────────────────────
+  /**
+   * Exchange a refresh token for a new session (rotation).
+   * The old session is revoked.
+   *
+   * @example
+   * const { session } = await db.auth.refreshSession(refreshToken);
+   */
+  async refreshSession(refreshToken, opts) {
+    return this.http.post(`${this.path}/session/refresh`, { refreshToken }, opts);
+  }
+  // ── User: get ──────────────────────────────────────────────────────────────
+  /**
+   * Fetch a user by their ID.
+   *
+   * @example
+   * const { data } = await db.auth.getUser('user_abc123');
+   */
+  async getUser(userId, opts) {
+    return this.http.get(`${this.path}/user`, { userId }, opts);
+  }
+  // ── User: list ─────────────────────────────────────────────────────────────
+  /**
+   * List users with cursor-based pagination.
+   *
+   * @example
+   * const { data, meta } = await db.auth.listUsers({ limit: 50 });
+   */
+  async listUsers(options) {
+    const params = {
+      limit: options?.limit
+    };
+    if (options?.cursor) params["cursor"] = options.cursor;
+    return this.http.get(`${this.path}/users`, params, options);
+  }
+  // ── User: update ───────────────────────────────────────────────────────────
+  /**
+   * Update user profile fields.
+   *
+   * @example
+   * await db.auth.updateUser({ userId: 'user_abc', updates: { fullName: 'Bob Smith' } });
+   */
+  async updateUser(payload, opts) {
+    return this.http.patch(`${this.path}/user`, payload, opts);
+  }
+  // ── User: delete ───────────────────────────────────────────────────────────
+  /**
+   * Soft-delete a user. All their sessions are revoked automatically.
+   *
+   * @example
+   * await db.auth.deleteUser('user_abc123');
+   */
+  async deleteUser(userId, opts) {
+    return this.http.delete(`${this.path}/user`, { userId }, opts);
+  }
+  // ── Password: change ───────────────────────────────────────────────────────
+  /**
+   * Change password for a signed-in user (requires old password).
+   * All sessions are revoked after success.
+   *
+   * @example
+   * await db.auth.changePassword({
+   *   userId: 'user_abc',
+   *   oldPassword: 'Old@Pass1',
+   *   newPassword: 'New@Pass2',
+   * });
+   */
+  async changePassword(payload, opts) {
+    return this.http.post(`${this.path}/password/change`, payload, opts);
+  }
+  // ── Password: reset request ────────────────────────────────────────────────
+  /**
+   * Request a password reset email.
+   * Always returns success to prevent email enumeration.
+   *
+   * @example
+   * await db.auth.requestPasswordReset({ email: 'alice@example.com' });
+   */
+  async requestPasswordReset(payload, opts) {
+    return this.http.post(`${this.path}/password/reset/request`, payload, opts);
+  }
+  // ── Password: reset confirm ────────────────────────────────────────────────
+  /**
+   * Confirm a password reset using the token from the reset email.
+   *
+   * @example
+   * await db.auth.confirmPasswordReset({ resetToken: 'tok_...', newPassword: 'New@Pass2' });
+   */
+  async confirmPasswordReset(payload, opts) {
+    return this.http.post(`${this.path}/password/reset/confirm`, payload, opts);
+  }
+  // ── Email: verify request ──────────────────────────────────────────────────
+  /**
+   * Send a verification email to the user.
+   *
+   * @example
+   * await db.auth.requestEmailVerification({ userId: 'user_abc' });
+   */
+  async requestEmailVerification(payload, opts) {
+    return this.http.post(`${this.path}/email/verify/request`, payload, opts);
+  }
+  // ── Email: verify confirm ──────────────────────────────────────────────────
+  /**
+   * Confirm email address using the token from the verification email.
+   *
+   * @example
+   * await db.auth.confirmEmailVerification({ verifyToken: 'tok_...' });
+   */
+  async confirmEmailVerification(payload, opts) {
+    return this.http.post(`${this.path}/email/verify/confirm`, payload, opts);
+  }
+  // ── Account: lock ──────────────────────────────────────────────────────────
+  /**
+   * Lock a user account for a given duration (default: 15 min).
+   *
+   * @example
+   * await db.auth.lockAccount({ userId: 'user_abc', duration: 30 * 60 * 1000 });
+   */
+  async lockAccount(payload, opts) {
+    return this.http.post(`${this.path}/account/lock`, payload, opts);
+  }
+  // ── Account: unlock ────────────────────────────────────────────────────────
+  /**
+   * Unlock a previously locked user account.
+   *
+   * @example
+   * await db.auth.unlockAccount('user_abc');
+   */
+  async unlockAccount(userId, opts) {
+    return this.http.post(`${this.path}/account/unlock`, { userId }, opts);
+  }
+  // ── Helpers ────────────────────────────────────────────────────────────────
+  /**
+   * Fetch all users, automatically following cursors.
+   *
+   * @example
+   * const users = await db.auth.listAllUsers();
+   */
+  async listAllUsers(opts) {
+    const all = [];
+    let cursor = null;
+    do {
+      const result = await this.listUsers(cursor ? { cursor, ...opts } : { ...opts });
+      all.push(...result.data);
+      cursor = result.meta.nextCursor ?? null;
+    } while (cursor);
+    return all;
+  }
+};
+
+exports.AuthClient = AuthClient;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/client.ts"],"names":[],"mappings":";;;AAwBO,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA,EAEhD,IAAY,IAAA,GAAO;AACjB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,MAAA,CAAO,OAAA,EAAwB,IAAA,EAAgD;AACnF,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAqB,CAAA,EAAG,KAAK,IAAI,CAAA,OAAA,CAAA,EAAW,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAA,CAAO,OAAA,EAAwB,IAAA,EAAgD;AACnF,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAqB,CAAA,EAAG,KAAK,IAAI,CAAA,OAAA,CAAA,EAAW,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAA,CAAQ,OAAA,EAAyB,IAAA,EAAoE;AACzG,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,QAAA,CAAA,EAAY,SAAS,IAAI,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,eAAA,CAAgB,SAAA,EAAmB,IAAA,EAAyD;AAChG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAA8B,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,iBAAA,CAAA,EAAqB,EAAE,SAAA,EAAU,EAAG,IAAI,CAAA;AAAA,EACrG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,cAAA,CAAe,YAAA,EAAsB,IAAA,EAAwD;AACjG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAA6B,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,gBAAA,CAAA,EAAoB,EAAE,YAAA,EAAa,EAAG,IAAI,CAAA;AAAA,EACtG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,EAAiD;AAC7E,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAqB,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAU,OAAA,EAA4F;AAC1G,IAAA,MAAM,MAAA,GAAuE;AAAA,MAC3E,OAAO,OAAA,EAAS;AAAA,KAClB;AACA,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,QAAQ,IAAI,OAAA,CAAQ,MAAA;AAChD,IAAA,OAAO,IAAA,CAAK,KAAK,GAAA,CAAuB,CAAA,EAAG,KAAK,IAAI,CAAA,MAAA,CAAA,EAAU,QAAQ,OAAO,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAA,CAAW,OAAA,EAA4B,IAAA,EAAoD;AAC/F,IAAA,OAAO,IAAA,CAAK,KAAK,KAAA,CAA0B,CAAA,EAAG,KAAK,IAAI,CAAA,KAAA,CAAA,EAAS,SAAS,IAAI,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,EAAoE;AACnG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,cAAA,CAAe,OAAA,EAAgC,IAAA,EAAoE;AACvH,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,gBAAA,CAAA,EAAoB,SAAS,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,oBAAA,CAAqB,OAAA,EAAsC,IAAA,EAAoE;AACnI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,uBAAA,CAAA,EAA2B,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,CAAqB,OAAA,EAAsC,IAAA,EAAoE;AACnI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,uBAAA,CAAA,EAA2B,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,wBAAA,CAAyB,OAAA,EAAoC,IAAA,EAAoE;AACrI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,qBAAA,CAAA,EAAyB,SAAS,IAAI,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,wBAAA,CAAyB,OAAA,EAAoC,IAAA,EAAoE;AACrI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,qBAAA,CAAA,EAAyB,SAAS,IAAI,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAA,CAAY,OAAA,EAA6B,IAAA,EAAqD;AAClG,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAA0B,CAAA,EAAG,KAAK,IAAI,CAAA,aAAA,CAAA,EAAiB,SAAS,IAAI,CAAA;AAAA,EACvF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,aAAA,CAAc,MAAA,EAAgB,IAAA,EAAoE;AACtG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,eAAA,CAAA,EAAmB,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,aAAa,IAAA,EAA4C;AAC7D,IAAA,MAAM,MAAkB,EAAC;AACzB,IAAA,IAAI,MAAA,GAAwB,IAAA;AAE5B,IAAA,GAAG;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,EAAE,MAAA,EAAQ,GAAG,IAAA,EAAK,GAAI,EAAE,GAAG,MAAM,CAAA;AAC9E,MAAA,GAAA,CAAI,IAAA,CAAK,GAAG,MAAA,CAAO,IAAI,CAAA;AACvB,MAAA,MAAA,GAAS,MAAA,CAAO,KAAK,UAAA,IAAc,IAAA;AAAA,IACrC,CAAA,QAAS,MAAA;AAET,IAAA,OAAO,GAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import type { HttpClient } from '../utils/http.js';\nimport type {\n  SignUpPayload,\n  SignUpResponse,\n  SignInPayload,\n  SignInResponse,\n  SignOutPayload,\n  ValidateSessionResponse,\n  RefreshSessionResponse,\n  GetUserResponse,\n  ListUsersResponse,\n  UpdateUserPayload,\n  UpdateUserResponse,\n  PasswordChangePayload,\n  PasswordResetRequestPayload,\n  PasswordResetConfirmPayload,\n  EmailVerifyRequestPayload,\n  EmailVerifyConfirmPayload,\n  AccountLockPayload,\n  AccountLockResponse,\n  AuthUser,\n  RequestOptions,\n} from '../types/index.js';\n\nexport class AuthClient {\n  constructor(private readonly http: HttpClient) {}\n\n  private get path() {\n    return `/auth/${this.http.bucketKey}`;\n  }\n\n  // ── Sign-up ────────────────────────────────────────────────────────────────\n\n  /**\n   * Create a new user account. Returns the user and a session immediately.\n   *\n   * @example\n   * const { data, session } = await db.auth.signUp({\n   *   email: 'alice@example.com',\n   *   password: 'Str0ngP@ss!',\n   *   fullName: 'Alice Smith',\n   * });\n   * // Store session.sessionId and session.refreshToken in your app\n   */\n  async signUp(payload: SignUpPayload, opts?: RequestOptions): Promise<SignUpResponse> {\n    return this.http.post<SignUpResponse>(`${this.path}/signup`, payload, opts);\n  }\n\n  // ── Sign-in ────────────────────────────────────────────────────────────────\n\n  /**\n   * Authenticate with email + password. Returns user data and a new session.\n   *\n   * @example\n   * const { data, session } = await db.auth.signIn({\n   *   email: 'alice@example.com',\n   *   password: 'Str0ngP@ss!',\n   * });\n   */\n  async signIn(payload: SignInPayload, opts?: RequestOptions): Promise<SignInResponse> {\n    return this.http.post<SignInResponse>(`${this.path}/signin`, payload, opts);\n  }\n\n  // ── Sign-out ───────────────────────────────────────────────────────────────\n\n  /**\n   * Revoke a session (or all sessions for a user).\n   *\n   * @example\n   * // Single device\n   * await db.auth.signOut({ sessionId: 'sess_...' });\n   *\n   * // All devices\n   * await db.auth.signOut({ allDevices: true, userId: 'user_...' });\n   */\n  async signOut(payload: SignOutPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/signout`, payload, opts);\n  }\n\n  // ── Session: validate ──────────────────────────────────────────────────────\n\n  /**\n   * Validate a session token — use this on every protected request in your backend.\n   *\n   * @example\n   * try {\n   *   const { data } = await db.auth.validateSession(sessionId);\n   *   // data is the authenticated user\n   * } catch (err) {\n   *   // Session expired or invalid\n   * }\n   */\n  async validateSession(sessionId: string, opts?: RequestOptions): Promise<ValidateSessionResponse> {\n    return this.http.post<ValidateSessionResponse>(`${this.path}/session/validate`, { sessionId }, opts);\n  }\n\n  // ── Session: refresh ───────────────────────────────────────────────────────\n\n  /**\n   * Exchange a refresh token for a new session (rotation).\n   * The old session is revoked.\n   *\n   * @example\n   * const { session } = await db.auth.refreshSession(refreshToken);\n   */\n  async refreshSession(refreshToken: string, opts?: RequestOptions): Promise<RefreshSessionResponse> {\n    return this.http.post<RefreshSessionResponse>(`${this.path}/session/refresh`, { refreshToken }, opts);\n  }\n\n  // ── User: get ──────────────────────────────────────────────────────────────\n\n  /**\n   * Fetch a user by their ID.\n   *\n   * @example\n   * const { data } = await db.auth.getUser('user_abc123');\n   */\n  async getUser(userId: string, opts?: RequestOptions): Promise<GetUserResponse> {\n    return this.http.get<GetUserResponse>(`${this.path}/user`, { userId }, opts);\n  }\n\n  // ── User: list ─────────────────────────────────────────────────────────────\n\n  /**\n   * List users with cursor-based pagination.\n   *\n   * @example\n   * const { data, meta } = await db.auth.listUsers({ limit: 50 });\n   */\n  async listUsers(options?: { limit?: number; cursor?: string } & RequestOptions): Promise<ListUsersResponse> {\n    const params: Record<string, string | number | boolean | undefined | null> = {\n      limit: options?.limit,\n    };\n    if (options?.cursor) params['cursor'] = options.cursor;\n    return this.http.get<ListUsersResponse>(`${this.path}/users`, params, options);\n  }\n\n  // ── User: update ───────────────────────────────────────────────────────────\n\n  /**\n   * Update user profile fields.\n   *\n   * @example\n   * await db.auth.updateUser({ userId: 'user_abc', updates: { fullName: 'Bob Smith' } });\n   */\n  async updateUser(payload: UpdateUserPayload, opts?: RequestOptions): Promise<UpdateUserResponse> {\n    return this.http.patch<UpdateUserResponse>(`${this.path}/user`, payload, opts);\n  }\n\n  // ── User: delete ───────────────────────────────────────────────────────────\n\n  /**\n   * Soft-delete a user. All their sessions are revoked automatically.\n   *\n   * @example\n   * await db.auth.deleteUser('user_abc123');\n   */\n  async deleteUser(userId: string, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.delete(`${this.path}/user`, { userId }, opts);\n  }\n\n  // ── Password: change ───────────────────────────────────────────────────────\n\n  /**\n   * Change password for a signed-in user (requires old password).\n   * All sessions are revoked after success.\n   *\n   * @example\n   * await db.auth.changePassword({\n   *   userId: 'user_abc',\n   *   oldPassword: 'Old@Pass1',\n   *   newPassword: 'New@Pass2',\n   * });\n   */\n  async changePassword(payload: PasswordChangePayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/change`, payload, opts);\n  }\n\n  // ── Password: reset request ────────────────────────────────────────────────\n\n  /**\n   * Request a password reset email.\n   * Always returns success to prevent email enumeration.\n   *\n   * @example\n   * await db.auth.requestPasswordReset({ email: 'alice@example.com' });\n   */\n  async requestPasswordReset(payload: PasswordResetRequestPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/reset/request`, payload, opts);\n  }\n\n  // ── Password: reset confirm ────────────────────────────────────────────────\n\n  /**\n   * Confirm a password reset using the token from the reset email.\n   *\n   * @example\n   * await db.auth.confirmPasswordReset({ resetToken: 'tok_...', newPassword: 'New@Pass2' });\n   */\n  async confirmPasswordReset(payload: PasswordResetConfirmPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/reset/confirm`, payload, opts);\n  }\n\n  // ── Email: verify request ──────────────────────────────────────────────────\n\n  /**\n   * Send a verification email to the user.\n   *\n   * @example\n   * await db.auth.requestEmailVerification({ userId: 'user_abc' });\n   */\n  async requestEmailVerification(payload: EmailVerifyRequestPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/email/verify/request`, payload, opts);\n  }\n\n  // ── Email: verify confirm ──────────────────────────────────────────────────\n\n  /**\n   * Confirm email address using the token from the verification email.\n   *\n   * @example\n   * await db.auth.confirmEmailVerification({ verifyToken: 'tok_...' });\n   */\n  async confirmEmailVerification(payload: EmailVerifyConfirmPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/email/verify/confirm`, payload, opts);\n  }\n\n  // ── Account: lock ──────────────────────────────────────────────────────────\n\n  /**\n   * Lock a user account for a given duration (default: 15 min).\n   *\n   * @example\n   * await db.auth.lockAccount({ userId: 'user_abc', duration: 30 * 60 * 1000 });\n   */\n  async lockAccount(payload: AccountLockPayload, opts?: RequestOptions): Promise<AccountLockResponse> {\n    return this.http.post<AccountLockResponse>(`${this.path}/account/lock`, payload, opts);\n  }\n\n  // ── Account: unlock ────────────────────────────────────────────────────────\n\n  /**\n   * Unlock a previously locked user account.\n   *\n   * @example\n   * await db.auth.unlockAccount('user_abc');\n   */\n  async unlockAccount(userId: string, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/account/unlock`, { userId }, opts);\n  }\n\n  // ── Helpers ────────────────────────────────────────────────────────────────\n\n  /**\n   * Fetch all users, automatically following cursors.\n   *\n   * @example\n   * const users = await db.auth.listAllUsers();\n   */\n  async listAllUsers(opts?: RequestOptions): Promise<AuthUser[]> {\n    const all: AuthUser[] = [];\n    let cursor: string | null = null;\n\n    do {\n      const result = await this.listUsers(cursor ? { cursor, ...opts } : { ...opts });\n      all.push(...result.data);\n      cursor = result.meta.nextCursor ?? null;\n    } while (cursor);\n\n    return all;\n  }\n}\n"]}

package/dist/auth/index.mjs

@@ -0,0 +1,218 @@
+// src/auth/client.ts
+var AuthClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  get path() {
+    return `/auth/${this.http.bucketKey}`;
+  }
+  // ── Sign-up ────────────────────────────────────────────────────────────────
+  /**
+   * Create a new user account. Returns the user and a session immediately.
+   *
+   * @example
+   * const { data, session } = await db.auth.signUp({
+   *   email: 'alice@example.com',
+   *   password: 'Str0ngP@ss!',
+   *   fullName: 'Alice Smith',
+   * });
+   * // Store session.sessionId and session.refreshToken in your app
+   */
+  async signUp(payload, opts) {
+    return this.http.post(`${this.path}/signup`, payload, opts);
+  }
+  // ── Sign-in ────────────────────────────────────────────────────────────────
+  /**
+   * Authenticate with email + password. Returns user data and a new session.
+   *
+   * @example
+   * const { data, session } = await db.auth.signIn({
+   *   email: 'alice@example.com',
+   *   password: 'Str0ngP@ss!',
+   * });
+   */
+  async signIn(payload, opts) {
+    return this.http.post(`${this.path}/signin`, payload, opts);
+  }
+  // ── Sign-out ───────────────────────────────────────────────────────────────
+  /**
+   * Revoke a session (or all sessions for a user).
+   *
+   * @example
+   * // Single device
+   * await db.auth.signOut({ sessionId: 'sess_...' });
+   *
+   * // All devices
+   * await db.auth.signOut({ allDevices: true, userId: 'user_...' });
+   */
+  async signOut(payload, opts) {
+    return this.http.post(`${this.path}/signout`, payload, opts);
+  }
+  // ── Session: validate ──────────────────────────────────────────────────────
+  /**
+   * Validate a session token — use this on every protected request in your backend.
+   *
+   * @example
+   * try {
+   *   const { data } = await db.auth.validateSession(sessionId);
+   *   // data is the authenticated user
+   * } catch (err) {
+   *   // Session expired or invalid
+   * }
+   */
+  async validateSession(sessionId, opts) {
+    return this.http.post(`${this.path}/session/validate`, { sessionId }, opts);
+  }
+  // ── Session: refresh ───────────────────────────────────────────────────────
+  /**
+   * Exchange a refresh token for a new session (rotation).
+   * The old session is revoked.
+   *
+   * @example
+   * const { session } = await db.auth.refreshSession(refreshToken);
+   */
+  async refreshSession(refreshToken, opts) {
+    return this.http.post(`${this.path}/session/refresh`, { refreshToken }, opts);
+  }
+  // ── User: get ──────────────────────────────────────────────────────────────
+  /**
+   * Fetch a user by their ID.
+   *
+   * @example
+   * const { data } = await db.auth.getUser('user_abc123');
+   */
+  async getUser(userId, opts) {
+    return this.http.get(`${this.path}/user`, { userId }, opts);
+  }
+  // ── User: list ─────────────────────────────────────────────────────────────
+  /**
+   * List users with cursor-based pagination.
+   *
+   * @example
+   * const { data, meta } = await db.auth.listUsers({ limit: 50 });
+   */
+  async listUsers(options) {
+    const params = {
+      limit: options?.limit
+    };
+    if (options?.cursor) params["cursor"] = options.cursor;
+    return this.http.get(`${this.path}/users`, params, options);
+  }
+  // ── User: update ───────────────────────────────────────────────────────────
+  /**
+   * Update user profile fields.
+   *
+   * @example
+   * await db.auth.updateUser({ userId: 'user_abc', updates: { fullName: 'Bob Smith' } });
+   */
+  async updateUser(payload, opts) {
+    return this.http.patch(`${this.path}/user`, payload, opts);
+  }
+  // ── User: delete ───────────────────────────────────────────────────────────
+  /**
+   * Soft-delete a user. All their sessions are revoked automatically.
+   *
+   * @example
+   * await db.auth.deleteUser('user_abc123');
+   */
+  async deleteUser(userId, opts) {
+    return this.http.delete(`${this.path}/user`, { userId }, opts);
+  }
+  // ── Password: change ───────────────────────────────────────────────────────
+  /**
+   * Change password for a signed-in user (requires old password).
+   * All sessions are revoked after success.
+   *
+   * @example
+   * await db.auth.changePassword({
+   *   userId: 'user_abc',
+   *   oldPassword: 'Old@Pass1',
+   *   newPassword: 'New@Pass2',
+   * });
+   */
+  async changePassword(payload, opts) {
+    return this.http.post(`${this.path}/password/change`, payload, opts);
+  }
+  // ── Password: reset request ────────────────────────────────────────────────
+  /**
+   * Request a password reset email.
+   * Always returns success to prevent email enumeration.
+   *
+   * @example
+   * await db.auth.requestPasswordReset({ email: 'alice@example.com' });
+   */
+  async requestPasswordReset(payload, opts) {
+    return this.http.post(`${this.path}/password/reset/request`, payload, opts);
+  }
+  // ── Password: reset confirm ────────────────────────────────────────────────
+  /**
+   * Confirm a password reset using the token from the reset email.
+   *
+   * @example
+   * await db.auth.confirmPasswordReset({ resetToken: 'tok_...', newPassword: 'New@Pass2' });
+   */
+  async confirmPasswordReset(payload, opts) {
+    return this.http.post(`${this.path}/password/reset/confirm`, payload, opts);
+  }
+  // ── Email: verify request ──────────────────────────────────────────────────
+  /**
+   * Send a verification email to the user.
+   *
+   * @example
+   * await db.auth.requestEmailVerification({ userId: 'user_abc' });
+   */
+  async requestEmailVerification(payload, opts) {
+    return this.http.post(`${this.path}/email/verify/request`, payload, opts);
+  }
+  // ── Email: verify confirm ──────────────────────────────────────────────────
+  /**
+   * Confirm email address using the token from the verification email.
+   *
+   * @example
+   * await db.auth.confirmEmailVerification({ verifyToken: 'tok_...' });
+   */
+  async confirmEmailVerification(payload, opts) {
+    return this.http.post(`${this.path}/email/verify/confirm`, payload, opts);
+  }
+  // ── Account: lock ──────────────────────────────────────────────────────────
+  /**
+   * Lock a user account for a given duration (default: 15 min).
+   *
+   * @example
+   * await db.auth.lockAccount({ userId: 'user_abc', duration: 30 * 60 * 1000 });
+   */
+  async lockAccount(payload, opts) {
+    return this.http.post(`${this.path}/account/lock`, payload, opts);
+  }
+  // ── Account: unlock ────────────────────────────────────────────────────────
+  /**
+   * Unlock a previously locked user account.
+   *
+   * @example
+   * await db.auth.unlockAccount('user_abc');
+   */
+  async unlockAccount(userId, opts) {
+    return this.http.post(`${this.path}/account/unlock`, { userId }, opts);
+  }
+  // ── Helpers ────────────────────────────────────────────────────────────────
+  /**
+   * Fetch all users, automatically following cursors.
+   *
+   * @example
+   * const users = await db.auth.listAllUsers();
+   */
+  async listAllUsers(opts) {
+    const all = [];
+    let cursor = null;
+    do {
+      const result = await this.listUsers(cursor ? { cursor, ...opts } : { ...opts });
+      all.push(...result.data);
+      cursor = result.meta.nextCursor ?? null;
+    } while (cursor);
+    return all;
+  }
+};
+
+export { AuthClient };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/auth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/client.ts"],"names":[],"mappings":";AAwBO,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA,EAEhD,IAAY,IAAA,GAAO;AACjB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,MAAA,CAAO,OAAA,EAAwB,IAAA,EAAgD;AACnF,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAqB,CAAA,EAAG,KAAK,IAAI,CAAA,OAAA,CAAA,EAAW,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAA,CAAO,OAAA,EAAwB,IAAA,EAAgD;AACnF,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAqB,CAAA,EAAG,KAAK,IAAI,CAAA,OAAA,CAAA,EAAW,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAA,CAAQ,OAAA,EAAyB,IAAA,EAAoE;AACzG,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,QAAA,CAAA,EAAY,SAAS,IAAI,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,eAAA,CAAgB,SAAA,EAAmB,IAAA,EAAyD;AAChG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAA8B,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,iBAAA,CAAA,EAAqB,EAAE,SAAA,EAAU,EAAG,IAAI,CAAA;AAAA,EACrG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,cAAA,CAAe,YAAA,EAAsB,IAAA,EAAwD;AACjG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAA6B,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,gBAAA,CAAA,EAAoB,EAAE,YAAA,EAAa,EAAG,IAAI,CAAA;AAAA,EACtG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,EAAiD;AAC7E,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAqB,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAU,OAAA,EAA4F;AAC1G,IAAA,MAAM,MAAA,GAAuE;AAAA,MAC3E,OAAO,OAAA,EAAS;AAAA,KAClB;AACA,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,QAAQ,IAAI,OAAA,CAAQ,MAAA;AAChD,IAAA,OAAO,IAAA,CAAK,KAAK,GAAA,CAAuB,CAAA,EAAG,KAAK,IAAI,CAAA,MAAA,CAAA,EAAU,QAAQ,OAAO,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAA,CAAW,OAAA,EAA4B,IAAA,EAAoD;AAC/F,IAAA,OAAO,IAAA,CAAK,KAAK,KAAA,CAA0B,CAAA,EAAG,KAAK,IAAI,CAAA,KAAA,CAAA,EAAS,SAAS,IAAI,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,EAAoE;AACnG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,cAAA,CAAe,OAAA,EAAgC,IAAA,EAAoE;AACvH,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,gBAAA,CAAA,EAAoB,SAAS,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,oBAAA,CAAqB,OAAA,EAAsC,IAAA,EAAoE;AACnI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,uBAAA,CAAA,EAA2B,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,CAAqB,OAAA,EAAsC,IAAA,EAAoE;AACnI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,uBAAA,CAAA,EAA2B,SAAS,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,wBAAA,CAAyB,OAAA,EAAoC,IAAA,EAAoE;AACrI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,qBAAA,CAAA,EAAyB,SAAS,IAAI,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,wBAAA,CAAyB,OAAA,EAAoC,IAAA,EAAoE;AACrI,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,CAAA,EAAG,KAAK,IAAI,CAAA,qBAAA,CAAA,EAAyB,SAAS,IAAI,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAA,CAAY,OAAA,EAA6B,IAAA,EAAqD;AAClG,IAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAA0B,CAAA,EAAG,KAAK,IAAI,CAAA,aAAA,CAAA,EAAiB,SAAS,IAAI,CAAA;AAAA,EACvF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,aAAA,CAAc,MAAA,EAAgB,IAAA,EAAoE;AACtG,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,eAAA,CAAA,EAAmB,EAAE,MAAA,EAAO,EAAG,IAAI,CAAA;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,aAAa,IAAA,EAA4C;AAC7D,IAAA,MAAM,MAAkB,EAAC;AACzB,IAAA,IAAI,MAAA,GAAwB,IAAA;AAE5B,IAAA,GAAG;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,EAAE,MAAA,EAAQ,GAAG,IAAA,EAAK,GAAI,EAAE,GAAG,MAAM,CAAA;AAC9E,MAAA,GAAA,CAAI,IAAA,CAAK,GAAG,MAAA,CAAO,IAAI,CAAA;AACvB,MAAA,MAAA,GAAS,MAAA,CAAO,KAAK,UAAA,IAAc,IAAA;AAAA,IACrC,CAAA,QAAS,MAAA;AAET,IAAA,OAAO,GAAA;AAAA,EACT;AACF","file":"index.mjs","sourcesContent":["import type { HttpClient } from '../utils/http.js';\nimport type {\n  SignUpPayload,\n  SignUpResponse,\n  SignInPayload,\n  SignInResponse,\n  SignOutPayload,\n  ValidateSessionResponse,\n  RefreshSessionResponse,\n  GetUserResponse,\n  ListUsersResponse,\n  UpdateUserPayload,\n  UpdateUserResponse,\n  PasswordChangePayload,\n  PasswordResetRequestPayload,\n  PasswordResetConfirmPayload,\n  EmailVerifyRequestPayload,\n  EmailVerifyConfirmPayload,\n  AccountLockPayload,\n  AccountLockResponse,\n  AuthUser,\n  RequestOptions,\n} from '../types/index.js';\n\nexport class AuthClient {\n  constructor(private readonly http: HttpClient) {}\n\n  private get path() {\n    return `/auth/${this.http.bucketKey}`;\n  }\n\n  // ── Sign-up ────────────────────────────────────────────────────────────────\n\n  /**\n   * Create a new user account. Returns the user and a session immediately.\n   *\n   * @example\n   * const { data, session } = await db.auth.signUp({\n   *   email: 'alice@example.com',\n   *   password: 'Str0ngP@ss!',\n   *   fullName: 'Alice Smith',\n   * });\n   * // Store session.sessionId and session.refreshToken in your app\n   */\n  async signUp(payload: SignUpPayload, opts?: RequestOptions): Promise<SignUpResponse> {\n    return this.http.post<SignUpResponse>(`${this.path}/signup`, payload, opts);\n  }\n\n  // ── Sign-in ────────────────────────────────────────────────────────────────\n\n  /**\n   * Authenticate with email + password. Returns user data and a new session.\n   *\n   * @example\n   * const { data, session } = await db.auth.signIn({\n   *   email: 'alice@example.com',\n   *   password: 'Str0ngP@ss!',\n   * });\n   */\n  async signIn(payload: SignInPayload, opts?: RequestOptions): Promise<SignInResponse> {\n    return this.http.post<SignInResponse>(`${this.path}/signin`, payload, opts);\n  }\n\n  // ── Sign-out ───────────────────────────────────────────────────────────────\n\n  /**\n   * Revoke a session (or all sessions for a user).\n   *\n   * @example\n   * // Single device\n   * await db.auth.signOut({ sessionId: 'sess_...' });\n   *\n   * // All devices\n   * await db.auth.signOut({ allDevices: true, userId: 'user_...' });\n   */\n  async signOut(payload: SignOutPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/signout`, payload, opts);\n  }\n\n  // ── Session: validate ──────────────────────────────────────────────────────\n\n  /**\n   * Validate a session token — use this on every protected request in your backend.\n   *\n   * @example\n   * try {\n   *   const { data } = await db.auth.validateSession(sessionId);\n   *   // data is the authenticated user\n   * } catch (err) {\n   *   // Session expired or invalid\n   * }\n   */\n  async validateSession(sessionId: string, opts?: RequestOptions): Promise<ValidateSessionResponse> {\n    return this.http.post<ValidateSessionResponse>(`${this.path}/session/validate`, { sessionId }, opts);\n  }\n\n  // ── Session: refresh ───────────────────────────────────────────────────────\n\n  /**\n   * Exchange a refresh token for a new session (rotation).\n   * The old session is revoked.\n   *\n   * @example\n   * const { session } = await db.auth.refreshSession(refreshToken);\n   */\n  async refreshSession(refreshToken: string, opts?: RequestOptions): Promise<RefreshSessionResponse> {\n    return this.http.post<RefreshSessionResponse>(`${this.path}/session/refresh`, { refreshToken }, opts);\n  }\n\n  // ── User: get ──────────────────────────────────────────────────────────────\n\n  /**\n   * Fetch a user by their ID.\n   *\n   * @example\n   * const { data } = await db.auth.getUser('user_abc123');\n   */\n  async getUser(userId: string, opts?: RequestOptions): Promise<GetUserResponse> {\n    return this.http.get<GetUserResponse>(`${this.path}/user`, { userId }, opts);\n  }\n\n  // ── User: list ─────────────────────────────────────────────────────────────\n\n  /**\n   * List users with cursor-based pagination.\n   *\n   * @example\n   * const { data, meta } = await db.auth.listUsers({ limit: 50 });\n   */\n  async listUsers(options?: { limit?: number; cursor?: string } & RequestOptions): Promise<ListUsersResponse> {\n    const params: Record<string, string | number | boolean | undefined | null> = {\n      limit: options?.limit,\n    };\n    if (options?.cursor) params['cursor'] = options.cursor;\n    return this.http.get<ListUsersResponse>(`${this.path}/users`, params, options);\n  }\n\n  // ── User: update ───────────────────────────────────────────────────────────\n\n  /**\n   * Update user profile fields.\n   *\n   * @example\n   * await db.auth.updateUser({ userId: 'user_abc', updates: { fullName: 'Bob Smith' } });\n   */\n  async updateUser(payload: UpdateUserPayload, opts?: RequestOptions): Promise<UpdateUserResponse> {\n    return this.http.patch<UpdateUserResponse>(`${this.path}/user`, payload, opts);\n  }\n\n  // ── User: delete ───────────────────────────────────────────────────────────\n\n  /**\n   * Soft-delete a user. All their sessions are revoked automatically.\n   *\n   * @example\n   * await db.auth.deleteUser('user_abc123');\n   */\n  async deleteUser(userId: string, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.delete(`${this.path}/user`, { userId }, opts);\n  }\n\n  // ── Password: change ───────────────────────────────────────────────────────\n\n  /**\n   * Change password for a signed-in user (requires old password).\n   * All sessions are revoked after success.\n   *\n   * @example\n   * await db.auth.changePassword({\n   *   userId: 'user_abc',\n   *   oldPassword: 'Old@Pass1',\n   *   newPassword: 'New@Pass2',\n   * });\n   */\n  async changePassword(payload: PasswordChangePayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/change`, payload, opts);\n  }\n\n  // ── Password: reset request ────────────────────────────────────────────────\n\n  /**\n   * Request a password reset email.\n   * Always returns success to prevent email enumeration.\n   *\n   * @example\n   * await db.auth.requestPasswordReset({ email: 'alice@example.com' });\n   */\n  async requestPasswordReset(payload: PasswordResetRequestPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/reset/request`, payload, opts);\n  }\n\n  // ── Password: reset confirm ────────────────────────────────────────────────\n\n  /**\n   * Confirm a password reset using the token from the reset email.\n   *\n   * @example\n   * await db.auth.confirmPasswordReset({ resetToken: 'tok_...', newPassword: 'New@Pass2' });\n   */\n  async confirmPasswordReset(payload: PasswordResetConfirmPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/password/reset/confirm`, payload, opts);\n  }\n\n  // ── Email: verify request ──────────────────────────────────────────────────\n\n  /**\n   * Send a verification email to the user.\n   *\n   * @example\n   * await db.auth.requestEmailVerification({ userId: 'user_abc' });\n   */\n  async requestEmailVerification(payload: EmailVerifyRequestPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/email/verify/request`, payload, opts);\n  }\n\n  // ── Email: verify confirm ──────────────────────────────────────────────────\n\n  /**\n   * Confirm email address using the token from the verification email.\n   *\n   * @example\n   * await db.auth.confirmEmailVerification({ verifyToken: 'tok_...' });\n   */\n  async confirmEmailVerification(payload: EmailVerifyConfirmPayload, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/email/verify/confirm`, payload, opts);\n  }\n\n  // ── Account: lock ──────────────────────────────────────────────────────────\n\n  /**\n   * Lock a user account for a given duration (default: 15 min).\n   *\n   * @example\n   * await db.auth.lockAccount({ userId: 'user_abc', duration: 30 * 60 * 1000 });\n   */\n  async lockAccount(payload: AccountLockPayload, opts?: RequestOptions): Promise<AccountLockResponse> {\n    return this.http.post<AccountLockResponse>(`${this.path}/account/lock`, payload, opts);\n  }\n\n  // ── Account: unlock ────────────────────────────────────────────────────────\n\n  /**\n   * Unlock a previously locked user account.\n   *\n   * @example\n   * await db.auth.unlockAccount('user_abc');\n   */\n  async unlockAccount(userId: string, opts?: RequestOptions): Promise<{ success: true; message: string }> {\n    return this.http.post(`${this.path}/account/unlock`, { userId }, opts);\n  }\n\n  // ── Helpers ────────────────────────────────────────────────────────────────\n\n  /**\n   * Fetch all users, automatically following cursors.\n   *\n   * @example\n   * const users = await db.auth.listAllUsers();\n   */\n  async listAllUsers(opts?: RequestOptions): Promise<AuthUser[]> {\n    const all: AuthUser[] = [];\n    let cursor: string | null = null;\n\n    do {\n      const result = await this.listUsers(cursor ? { cursor, ...opts } : { ...opts });\n      all.push(...result.data);\n      cursor = result.meta.nextCursor ?? null;\n    } while (cursor);\n\n    return all;\n  }\n}\n"]}