@atlasauth/angular 0.12.0 → 0.14.0

package/dist/lib/components/attempt-flow.component.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from '@angular/core';
-import { type AttemptView, type CaptchaController, type FieldError, type MfaEnrollmentController, type MfaEnrollmentState, type MfaEnrollmentStrategy } from '@atlasauth/js';
+import { type AttemptView, type CaptchaController, type FieldError, type FlowState, type MfaEnrollmentController, type MfaEnrollmentState, type MfaEnrollmentStrategy } from '@atlasauth/js';
 import { type ElementKey } from '../appearance';
 import * as i0 from "@angular/core";
 /**
@@ -9,10 +9,11 @@ import * as i0 from "@angular/core";
  * minor. For a `message` row, `labelKey` carries the message's i18n key.
  */
 interface StepField {
-    kind: 'input' | 'message' | 'alert';
+    kind: 'input' | 'message' | 'alert' | 'released';
     name: string;
     labelKey: string;
     type: string;
+    autocomplete?: string;
 }
 /**
  * The server-driven flow shell, shared by `<atlas-sign-in>` and
@@ -46,10 +47,16 @@ export declare class AttemptFlowComponent {
     firstFactors: string[] | null;
     /** The first factor already sent (`AtlasFlowController.preparedFactor()`): its code is collected. */
     preparedFactor: string | null;
+    /** `FlowState.passwordHold`: where the proof went, and whether the password signs in now. */
+    passwordHold: FlowState['passwordHold'];
+    /** `AtlasFlowController.holdProof()`: the emailed proof a password hold still waits on. */
+    holdProof: 'email_code' | 'email_link' | null;
     /** Emits the collected field values when the form is submitted. */
     submitFlow: EventEmitter<Record<string, string>>;
     /** Emits when the user picks a first factor the server must send first (an emailed code). */
-    chooseFactor: EventEmitter<"email_code">;
+    chooseFactor: EventEmitter<"email_code" | "email_link">;
+    /** Emits on "Use your password instead", from an emailed factor already sent. */
+    usePassword: EventEmitter<void>;
     /**
      * Offer "Email me a code instead" at the second factor (the instance's
      * `account.emailSecondFactor`); `emailSecondFactor` asks for it and
@@ -112,10 +119,42 @@ export declare class AttemptFlowComponent {
     protected smsSecondFactorSentTo(): string | null;
     protected formErrors(): FieldError[];
     protected fieldErrorsFor(name: string): FieldError[];
-    private step;
+    protected step(): {
+        kind: "collect_first_factor";
+        strategies: string[];
+    } | {
+        kind: "collect_second_factor";
+    } | {
+        kind: "enroll_second_factor";
+    } | {
+        kind: "collect_email_code";
+    } | {
+        kind: "collect_captcha";
+    } | {
+        kind: "await_oauth";
+    } | {
+        kind: "collect_new_password";
+    } | {
+        kind: "accept_policies";
+        policies: import("@atlasauth/js").PendingPolicy[];
+    } | {
+        kind: "complete_required_action";
+        actions: import("@atlasauth/js").PendingRequiredAction[];
+    } | {
+        kind: "done";
+        sessionId: string;
+    } | {
+        kind: "restart";
+        reason: "abandoned";
+    } | {
+        kind: "unknown";
+        status: string;
+    } | {
+        readonly kind: "collect_identifier";
+    };
     protected showCaptcha(): boolean;
     /** The first factors on offer at a `needs_first_factor` step (empty on any other). */
-    private offered;
+    protected offered(): string[];
     protected linkOnly(): boolean;
     protected showEmailSecondFactor(): boolean;
     /** Where the emailed second-factor code went (masked), once it was sent. */
@@ -123,11 +162,13 @@ export declare class AttemptFlowComponent {
     protected showEmailCodeOption(): boolean;
     /** The "we sent a code to …" line on the code step. */
     protected codeSentText(): string | null;
+    /** The "we sent a link to …" line, once a link was sent. */
+    protected linkSentText(): string | null;
     /** The attempt is `needs_policy_acceptance`. */
     protected awaitingPolicies(): boolean;
     protected showSubmit(): boolean;
     protected fields(): StepField[];
     static ɵfac: i0.ɵɵFactoryDeclaration<AttemptFlowComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<AttemptFlowComponent, "atlas-attempt-flow", never, { "attempt": { "alias": "attempt"; "required": false; }; "busy": { "alias": "busy"; "required": false; }; "errors": { "alias": "errors"; "required": false; }; "sessionKept": { "alias": "sessionKept"; "required": false; }; "titleKey": { "alias": "titleKey"; "required": false; }; "captcha": { "alias": "captcha"; "required": false; }; "firstFactors": { "alias": "firstFactors"; "required": false; }; "preparedFactor": { "alias": "preparedFactor"; "required": false; }; "offerEmailSecondFactor": { "alias": "offerEmailSecondFactor"; "required": false; }; "emailedSecondFactor": { "alias": "emailedSecondFactor"; "required": false; }; "offerSmsSecondFactor": { "alias": "offerSmsSecondFactor"; "required": false; }; "textedSecondFactor": { "alias": "textedSecondFactor"; "required": false; }; "enrollment": { "alias": "enrollment"; "required": false; }; "enrollmentState": { "alias": "enrollmentState"; "required": false; }; "emailVerification": { "alias": "emailVerification"; "required": false; }; }, { "submitFlow": "submitFlow"; "chooseFactor": "chooseFactor"; "emailSecondFactor": "emailSecondFactor"; "smsSecondFactor": "smsSecondFactor"; "resend": "resend"; "policyDeclined": "policyDeclined"; }, never, never, true, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<AttemptFlowComponent, "atlas-attempt-flow", never, { "attempt": { "alias": "attempt"; "required": false; }; "busy": { "alias": "busy"; "required": false; }; "errors": { "alias": "errors"; "required": false; }; "sessionKept": { "alias": "sessionKept"; "required": false; }; "titleKey": { "alias": "titleKey"; "required": false; }; "captcha": { "alias": "captcha"; "required": false; }; "firstFactors": { "alias": "firstFactors"; "required": false; }; "preparedFactor": { "alias": "preparedFactor"; "required": false; }; "passwordHold": { "alias": "passwordHold"; "required": false; }; "holdProof": { "alias": "holdProof"; "required": false; }; "offerEmailSecondFactor": { "alias": "offerEmailSecondFactor"; "required": false; }; "emailedSecondFactor": { "alias": "emailedSecondFactor"; "required": false; }; "offerSmsSecondFactor": { "alias": "offerSmsSecondFactor"; "required": false; }; "textedSecondFactor": { "alias": "textedSecondFactor"; "required": false; }; "enrollment": { "alias": "enrollment"; "required": false; }; "enrollmentState": { "alias": "enrollmentState"; "required": false; }; "emailVerification": { "alias": "emailVerification"; "required": false; }; }, { "submitFlow": "submitFlow"; "chooseFactor": "chooseFactor"; "usePassword": "usePassword"; "emailSecondFactor": "emailSecondFactor"; "smsSecondFactor": "smsSecondFactor"; "resend": "resend"; "policyDeclined": "policyDeclined"; }, never, never, true, never>;
 }
 export {};

package/dist/lib/components/flow-controller.d.ts

@@ -1,5 +1,5 @@
 import { WritableSignal } from '@angular/core';
-import { FapiClient, PolicyAcceptanceController, type CaptchaController, type FlowState, type InstanceSettings, type MfaChoices, type MfaEnrollmentController, type MfaEnrollmentState } from '@atlasauth/js';
+import { FapiClient, PolicyAcceptanceController, type CaptchaController, type FlowState, type InstanceSettings, type MfaChoices, type MfaEnrollmentController, type MfaEnrollmentState, type PasskeySignInController } from '@atlasauth/js';
 /**
  * The server-driven sign-in / sign-up engine, shared by `<atlas-sign-in>` and
  * `<atlas-sign-up>` — the Angular counterpart of React's `useFlow` hook.
@@ -19,6 +19,8 @@ export declare class AtlasFlowController {
     private readonly reload;
     /** Resolves the captcha messages' catalog keys. Defaults to en-US. */
     private readonly t;
+    /** Wait for {@link continueAfterExistingAccount} (`<atlas-sign-up>` draws the notice). */
+    private readonly holdExistingAccountNotice;
     readonly state: WritableSignal<FlowState>;
     /**
      * The instance's public sign-in / sign-up settings (captcha, sign-up fields,
@@ -44,7 +46,7 @@ export declare class AtlasFlowController {
      * current `needs_first_factor` step — the form then collects its code. Null
      * otherwise.
      */
-    readonly preparedFactor: WritableSignal<"email_code">;
+    readonly preparedFactor: WritableSignal<"email_code" | "email_link">;
     /**
      * "Email me a code instead" at the second factor ({@link sendEmailSecondFactor}):
      * in flight, where the code went, or why it was not sent. Null until asked,
@@ -73,6 +75,13 @@ export declare class AtlasFlowController {
      * {@link create} sends their acceptances and reloads them after a refusal.
      */
     readonly policies: PolicyAcceptanceController;
+    /**
+     * Passkey sign-in (the "Sign in with a passkey" button and passkey autofill on
+     * the identifier field). The outcome goes through the same completion as every sign-in.
+     */
+    readonly passkey: PasskeySignInController;
+    /** Whether this browser can run WebAuthn; `<atlas-sign-in>` sets it after it is created in a browser. */
+    readonly passkeySupported: WritableSignal<boolean>;
     private pollTimer;
     private identifier;
     constructor(client: FapiClient, reload: () => Promise<boolean>, pending: {
@@ -80,7 +89,18 @@ export declare class AtlasFlowController {
         status: string;
     } | null, 
     /** Resolves the captcha messages' catalog keys. Defaults to en-US. */
-    t?: (key: string) => string);
+    t?: (key: string) => string, 
+    /** Wait for {@link continueAfterExistingAccount} (`<atlas-sign-up>` draws the notice). */
+    holdExistingAccountNotice?: boolean);
+    /** Why "Continue with Atlas" could not start (the server's message); null otherwise. */
+    readonly signInWithAtlasError: WritableSignal<string>;
+    /**
+     * "Continue with Atlas" (when `settings().signInWithAtlas` is set): starts the
+     * SSO sign-in and sends the browser to Atlas.
+     */
+    signInWithAtlas(connectionId: string): Promise<void>;
+    /** "Sign in with a passkey" is offered: the first step, the instance turned passkey sign-in on, and the browser can. */
+    passkeyOffered(): boolean;
     /** What the app lets the MFA steps offer (from {@link settings}). */
     mfaChoices(): MfaChoices;
     /** Start the enrolment step for its attempt, or reset it once the flow leaves. */
@@ -93,6 +113,14 @@ export declare class AtlasFlowController {
      * (`settings.emailDelivery.available === false`). Empty on any other step.
      */
     firstFactors(): string[];
+    /**
+     * The emailed proof a password hold still waits on (`FlowState.passwordHold`): the
+     * code, or a link where the instance verifies by link only. Null with no hold, once
+     * proven, or while the app cannot deliver email.
+     */
+    holdProof(): 'email_code' | 'email_link' | null;
+    /** Back from the emailed factor to the password field. */
+    usePassword(): void;
     /**
      * True when email + password sign-up cannot complete because the app cannot
      * send the verification email (`settings.emailDelivery.passwordSignUp === false`):
@@ -104,9 +132,10 @@ export declare class AtlasFlowController {
     /**
      * Ask the server to email a sign-in code for the current `needs_first_factor`
      * step (`POST …/prepare_first_factor`); the form then collects the code, which
-     * {@link submit} posts as the `email_code` strategy.
+     * {@link submit} posts as the `email_code` strategy. While a password hold waits
+     * on it ({@link holdProof}), this emails that proof instead.
      */
-    prepare(strategy: 'email_code'): Promise<void>;
+    prepare(strategy: 'email_code' | 'email_link'): Promise<void>;
     /** Keep both captchas in step with the settings and the flow's current step. */
     private syncCaptcha;
     private setState;
@@ -166,6 +195,10 @@ export declare class AtlasFlowController {
     recoveryCodes(): string[] | null;
     /** "I've saved my codes": forget the recovery codes and finish the sign-in. */
     saveRecoveryCodes(): Promise<void>;
+    /** The address belonged to an existing account: the notice is up until {@link continueAfterExistingAccount}. */
+    existingAccountNotice(): boolean;
+    /** The user read the notice: finish the sign-up. */
+    continueAfterExistingAccount(): Promise<void>;
     private finish;
     /** Start/stop the §5.3 magic-link poll to match the current state. */
     syncPolling(): void;

package/dist/lib/components/sign-in.component.d.ts

@@ -24,8 +24,13 @@ export declare class SignInComponent implements OnInit, OnDestroy {
     protected t(key: string): string;
     /** "Last used: Password" on the identifier step, when the instance shows the hint. */
     protected lastUsedLabel(): string | null;
+    /** The "Sign in with Atlas" connection, on the first step, when the instance has it on. */
+    protected atlasConnection(): string | null;
     protected signUpHref(): string | null;
     protected readonly flow: AtlasFlowController;
+    private readonly passkeyOffered;
+    protected readonly passkeyAutofill: import("@angular/core").EffectRef;
+    protected submitIdentifier(values: Record<string, string>): void;
     ngOnInit(): void;
     ngOnDestroy(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<SignInComponent, never>;

package/dist/lib/components/sign-up.component.d.ts

@@ -19,6 +19,8 @@ export declare class SignUpComponent implements OnInit, OnDestroy {
     private readonly atlas;
     /** Where to send the user once the flow completes. Reserved for host routing. */
     afterUrl?: string;
+    /** Where the existing-account notice's "Forgot password?" goes. Default: the hosted sign-in page; `null` hides it. */
+    resetPasswordUrl?: string | null;
     protected readonly flow: AtlasFlowController;
     /** Password or passkey-only sign-up (the latter when the instance offers it). */
     protected readonly mode: import("@angular/core").WritableSignal<"password" | "passkey">;
@@ -27,6 +29,7 @@ export declare class SignUpComponent implements OnInit, OnDestroy {
         email: 'off' | 'optional' | 'required';
     } | null;
     protected toggleMode(): void;
+    protected resetHref(): string | null;
     protected awaitingPasskey(): boolean;
     protected t(key: string): string;
     protected cls(key: ElementKey, base: string): string;
@@ -34,5 +37,5 @@ export declare class SignUpComponent implements OnInit, OnDestroy {
     ngOnInit(): void;
     ngOnDestroy(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<SignUpComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<SignUpComponent, "atlas-sign-up", never, { "afterUrl": { "alias": "afterUrl"; "required": false; }; }, {}, never, never, true, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<SignUpComponent, "atlas-sign-up", never, { "afterUrl": { "alias": "afterUrl"; "required": false; }; "resetPasswordUrl": { "alias": "resetPasswordUrl"; "required": false; }; }, {}, never, never, true, never>;
 }

package/dist/lib/version.d.ts

@@ -1,4 +1,4 @@
 import type { AtlasSdkInfo } from '@atlasauth/js';
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-export declare const ATLAS_ANGULAR_VERSION = "0.11.0";
+export declare const ATLAS_ANGULAR_VERSION = "0.14.0";
 export declare const ATLAS_ANGULAR_SDK: AtlasSdkInfo;

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@atlasauth/angular",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Official Angular SDK for Atlas — the Angular peer of @atlasauth/react.",
   "license": "MIT",
-  "module": "./dist/fesm2022/atlas-angular.mjs",
+  "module": "./dist/fesm2022/atlasauth-angular.mjs",
   "typings": "./dist/index.d.ts",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -12,15 +12,15 @@
     },
     ".": {
       "types": "./dist/index.d.ts",
-      "esm2022": "./dist/esm2022/atlas-angular.mjs",
-      "default": "./dist/fesm2022/atlas-angular.mjs"
+      "esm2022": "./dist/esm2022/atlasauth-angular.mjs",
+      "default": "./dist/fesm2022/atlasauth-angular.mjs"
     }
   },
   "sideEffects": false,
   "dependencies": {
     "tslib": "^2.6.3",
     "@atlasauth/design": "0.3.0",
-    "@atlasauth/js": "0.26.1",
+    "@atlasauth/js": "0.32.0",
     "@atlasauth/authz": "0.3.0"
   },
   "peerDependencies": {