@atlasauth/expo 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # @atlasauth/expo changelog
 
+## 0.7.0 — 2026-11-13
+
+- `useAccountSecurity` / `createAccountSecurityActions` add `revokeAllTrustedDevices`.
+- Needs `@atlasauth/js` 0.41.0 or later.
+
 ## 0.6.0 — 2026-11-13
 
 - `useAccountSecurity` and `createAccountSecurityActions`; `linkWithIdToken`; captcha solved automatically on Hermes/JSC.

package/dist/account-security-hook.d.ts

@@ -0,0 +1,26 @@
+/** `const { changePassword } = useAccountSecurity();` bound to the provider's bearer-authenticated client. */
+export declare function useAccountSecurity(): {
+    changePassword: (input: {
+        currentPassword: string;
+        newPassword: string;
+    }) => Promise<import("@atlasauth/js").PasswordChangeResult>;
+    setPassword: (password: string) => Promise<import("@atlasauth/js").SetPasswordResult>;
+    listTrustedDevices: () => Promise<import("@atlasauth/js").TrustedDevicesResult>;
+    revokeTrustedDevice: (id: string) => Promise<import("@atlasauth/js").RevokeTrustedDeviceResult>;
+    revokeAllTrustedDevices: () => Promise<import("@atlasauth/js").RevokeAllTrustedDevicesResult>;
+    listSessions: () => Promise<import("@atlasauth/js").AccountSessionsResult>;
+    revokeAccountSession: (id: string) => Promise<import("@atlasauth/js").RevokeSessionResult>;
+    revokeAllSessions: () => Promise<import("@atlasauth/js").RevokeOtherSessionsResult>;
+    listMfaFactors: () => Promise<import("@atlasauth/js").MfaFactorsResult>;
+    startTotp: () => Promise<import("@atlasauth/js").StartTotpResult>;
+    verifyTotp: (factorId: string, codes: string[]) => Promise<import("@atlasauth/js").VerifyFactorResult>;
+    startSms: (phone: string) => Promise<import("@atlasauth/js").StartSmsResult>;
+    verifySms: (factorId: string, code: string) => Promise<import("@atlasauth/js").VerifyFactorResult>;
+    removeMfaFactor: (factorId: string) => Promise<import("@atlasauth/js").RemoveMfaFactorResult>;
+    regenerateBackupCodes: () => Promise<import("@atlasauth/js").RegenerateBackupCodesResult>;
+    listPasskeys: () => Promise<import("@atlasauth/js").AccountPasskeysResult>;
+    removePasskey: (id: string) => Promise<import("@atlasauth/js").RemovePasskeyResult>;
+    unlinkExternalAccount: (id: string) => Promise<import("@atlasauth/js").UnlinkExternalAccountResult>;
+    getNotificationPreferences: () => Promise<import("@atlasauth/js").NotificationPreferencesResult>;
+    updateNotificationPreferences: (preferences: Record<string, boolean>) => Promise<import("@atlasauth/js").NotificationPreferencesResult>;
+} | null;

package/dist/account-security-hook.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useAccountSecurity = useAccountSecurity;
+const react_1 = require("react");
+const account_security_1 = require("./account-security");
+const policies_1 = require("./policies");
+/** `const { changePassword } = useAccountSecurity();` bound to the provider's bearer-authenticated client. */
+function useAccountSecurity() {
+    const client = (0, policies_1.useExpoFapiClient)();
+    return (0, react_1.useMemo)(() => (client ? (0, account_security_1.createAccountSecurityActions)(client) : null), [client]);
+}
+//# sourceMappingURL=account-security-hook.js.map

package/dist/account-security-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-hook.js","sourceRoot":"","sources":["../src/account-security-hook.ts"],"names":[],"mappings":";;AAKA,gDAGC;AARD,iCAAgC;AAChC,yDAAkE;AAClE,yCAA+C;AAE/C,8GAA8G;AAC9G,SAAgB,kBAAkB;IAChC,MAAM,MAAM,GAAG,IAAA,4BAAiB,GAAE,CAAC;IACnC,OAAO,IAAA,eAAO,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,+CAA4B,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/account-security.d.ts

@@ -1,5 +1,15 @@
-import { changePassword, listTrustedDevices, revokeTrustedDevice, setPassword, type FapiClient } from '@atlasauth/js';
-export { changePassword, setPassword, listTrustedDevices, revokeTrustedDevice };
+/**
+ * Change or set the signed-in user's password, manage trusted devices, sessions,
+ * two-factor methods, passkeys, linked accounts and notification preferences,
+ * from a native app. The provider's client authenticates with the stored session
+ * token as a bearer, so these work without a cookie.
+ *
+ * This module imports no React or React Native, so it is also the
+ * `@atlasauth/expo/account-security` subpath (usable in plain Node, tests, workers).
+ * The `useAccountSecurity` hook lives in `./account-security-hook`.
+ */
+import { changePassword, getNotificationPreferences, listMfaFactors, listPasskeys, listSessions, listTrustedDevices, regenerateBackupCodes, removeMfaFactor, removePasskey, revokeAllSessions, revokeAllTrustedDevices, revokeAccountSession, revokeTrustedDevice, setPassword, startSms, startTotp, unlinkExternalAccount, updateNotificationPreferences, verifySms, verifyTotp, type FapiClient } from '@atlasauth/js';
+export { changePassword, setPassword, listTrustedDevices, revokeTrustedDevice, revokeAllTrustedDevices, listSessions, revokeAccountSession, revokeAllSessions, listMfaFactors, startTotp, verifyTotp, startSms, verifySms, removeMfaFactor, regenerateBackupCodes, listPasskeys, removePasskey, unlinkExternalAccount, getNotificationPreferences, updateNotificationPreferences, };
 /** The calls bound to a client; separated from React so it is testable with a fake one. */
 export declare function createAccountSecurityActions(client: FapiClient): {
     changePassword: (input: {
@@ -9,14 +19,21 @@ export declare function createAccountSecurityActions(client: FapiClient): {
     setPassword: (password: string) => Promise<import("@atlasauth/js").SetPasswordResult>;
     listTrustedDevices: () => Promise<import("@atlasauth/js").TrustedDevicesResult>;
     revokeTrustedDevice: (id: string) => Promise<import("@atlasauth/js").RevokeTrustedDeviceResult>;
+    revokeAllTrustedDevices: () => Promise<import("@atlasauth/js").RevokeAllTrustedDevicesResult>;
+    listSessions: () => Promise<import("@atlasauth/js").AccountSessionsResult>;
+    revokeAccountSession: (id: string) => Promise<import("@atlasauth/js").RevokeSessionResult>;
+    revokeAllSessions: () => Promise<import("@atlasauth/js").RevokeOtherSessionsResult>;
+    listMfaFactors: () => Promise<import("@atlasauth/js").MfaFactorsResult>;
+    startTotp: () => Promise<import("@atlasauth/js").StartTotpResult>;
+    verifyTotp: (factorId: string, codes: string[]) => Promise<import("@atlasauth/js").VerifyFactorResult>;
+    startSms: (phone: string) => Promise<import("@atlasauth/js").StartSmsResult>;
+    verifySms: (factorId: string, code: string) => Promise<import("@atlasauth/js").VerifyFactorResult>;
+    removeMfaFactor: (factorId: string) => Promise<import("@atlasauth/js").RemoveMfaFactorResult>;
+    regenerateBackupCodes: () => Promise<import("@atlasauth/js").RegenerateBackupCodesResult>;
+    listPasskeys: () => Promise<import("@atlasauth/js").AccountPasskeysResult>;
+    removePasskey: (id: string) => Promise<import("@atlasauth/js").RemovePasskeyResult>;
+    unlinkExternalAccount: (id: string) => Promise<import("@atlasauth/js").UnlinkExternalAccountResult>;
+    getNotificationPreferences: () => Promise<import("@atlasauth/js").NotificationPreferencesResult>;
+    updateNotificationPreferences: (preferences: Record<string, boolean>) => Promise<import("@atlasauth/js").NotificationPreferencesResult>;
 };
-/** `const { changePassword } = useAccountSecurity();` bound to the provider's bearer-authenticated client. */
-export declare function useAccountSecurity(): {
-    changePassword: (input: {
-        currentPassword: string;
-        newPassword: string;
-    }) => Promise<import("@atlasauth/js").PasswordChangeResult>;
-    setPassword: (password: string) => Promise<import("@atlasauth/js").SetPasswordResult>;
-    listTrustedDevices: () => Promise<import("@atlasauth/js").TrustedDevicesResult>;
-    revokeTrustedDevice: (id: string) => Promise<import("@atlasauth/js").RevokeTrustedDeviceResult>;
-} | null;
+export type AccountSecurityActions = ReturnType<typeof createAccountSecurityActions>;

package/dist/account-security.js

@@ -1,20 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.revokeTrustedDevice = exports.listTrustedDevices = exports.setPassword = exports.changePassword = void 0;
+exports.updateNotificationPreferences = exports.getNotificationPreferences = exports.unlinkExternalAccount = exports.removePasskey = exports.listPasskeys = exports.regenerateBackupCodes = exports.removeMfaFactor = exports.verifySms = exports.startSms = exports.verifyTotp = exports.startTotp = exports.listMfaFactors = exports.revokeAllSessions = exports.revokeAccountSession = exports.listSessions = exports.revokeAllTrustedDevices = exports.revokeTrustedDevice = exports.listTrustedDevices = exports.setPassword = exports.changePassword = void 0;
 exports.createAccountSecurityActions = createAccountSecurityActions;
-exports.useAccountSecurity = useAccountSecurity;
 /**
- * Change or set the signed-in user's password, and manage trusted devices, from
- * a native app. The provider's client authenticates with the stored session
+ * Change or set the signed-in user's password, manage trusted devices, sessions,
+ * two-factor methods, passkeys, linked accounts and notification preferences,
+ * from a native app. The provider's client authenticates with the stored session
  * token as a bearer, so these work without a cookie.
+ *
+ * This module imports no React or React Native, so it is also the
+ * `@atlasauth/expo/account-security` subpath (usable in plain Node, tests, workers).
+ * The `useAccountSecurity` hook lives in `./account-security-hook`.
  */
-const react_1 = require("react");
 const js_1 = require("@atlasauth/js");
 Object.defineProperty(exports, "changePassword", { enumerable: true, get: function () { return js_1.changePassword; } });
+Object.defineProperty(exports, "getNotificationPreferences", { enumerable: true, get: function () { return js_1.getNotificationPreferences; } });
+Object.defineProperty(exports, "listMfaFactors", { enumerable: true, get: function () { return js_1.listMfaFactors; } });
+Object.defineProperty(exports, "listPasskeys", { enumerable: true, get: function () { return js_1.listPasskeys; } });
+Object.defineProperty(exports, "listSessions", { enumerable: true, get: function () { return js_1.listSessions; } });
 Object.defineProperty(exports, "listTrustedDevices", { enumerable: true, get: function () { return js_1.listTrustedDevices; } });
+Object.defineProperty(exports, "regenerateBackupCodes", { enumerable: true, get: function () { return js_1.regenerateBackupCodes; } });
+Object.defineProperty(exports, "removeMfaFactor", { enumerable: true, get: function () { return js_1.removeMfaFactor; } });
+Object.defineProperty(exports, "removePasskey", { enumerable: true, get: function () { return js_1.removePasskey; } });
+Object.defineProperty(exports, "revokeAllSessions", { enumerable: true, get: function () { return js_1.revokeAllSessions; } });
+Object.defineProperty(exports, "revokeAllTrustedDevices", { enumerable: true, get: function () { return js_1.revokeAllTrustedDevices; } });
+Object.defineProperty(exports, "revokeAccountSession", { enumerable: true, get: function () { return js_1.revokeAccountSession; } });
 Object.defineProperty(exports, "revokeTrustedDevice", { enumerable: true, get: function () { return js_1.revokeTrustedDevice; } });
 Object.defineProperty(exports, "setPassword", { enumerable: true, get: function () { return js_1.setPassword; } });
-const policies_1 = require("./policies");
+Object.defineProperty(exports, "startSms", { enumerable: true, get: function () { return js_1.startSms; } });
+Object.defineProperty(exports, "startTotp", { enumerable: true, get: function () { return js_1.startTotp; } });
+Object.defineProperty(exports, "unlinkExternalAccount", { enumerable: true, get: function () { return js_1.unlinkExternalAccount; } });
+Object.defineProperty(exports, "updateNotificationPreferences", { enumerable: true, get: function () { return js_1.updateNotificationPreferences; } });
+Object.defineProperty(exports, "verifySms", { enumerable: true, get: function () { return js_1.verifySms; } });
+Object.defineProperty(exports, "verifyTotp", { enumerable: true, get: function () { return js_1.verifyTotp; } });
 /** The calls bound to a client; separated from React so it is testable with a fake one. */
 function createAccountSecurityActions(client) {
     return {
@@ -22,11 +40,22 @@ function createAccountSecurityActions(client) {
         setPassword: (password) => (0, js_1.setPassword)(client, password),
         listTrustedDevices: () => (0, js_1.listTrustedDevices)(client),
         revokeTrustedDevice: (id) => (0, js_1.revokeTrustedDevice)(client, id),
+        revokeAllTrustedDevices: () => (0, js_1.revokeAllTrustedDevices)(client),
+        listSessions: () => (0, js_1.listSessions)(client),
+        revokeAccountSession: (id) => (0, js_1.revokeAccountSession)(client, id),
+        revokeAllSessions: () => (0, js_1.revokeAllSessions)(client),
+        listMfaFactors: () => (0, js_1.listMfaFactors)(client),
+        startTotp: () => (0, js_1.startTotp)(client),
+        verifyTotp: (factorId, codes) => (0, js_1.verifyTotp)(client, factorId, codes),
+        startSms: (phone) => (0, js_1.startSms)(client, phone),
+        verifySms: (factorId, code) => (0, js_1.verifySms)(client, factorId, code),
+        removeMfaFactor: (factorId) => (0, js_1.removeMfaFactor)(client, factorId),
+        regenerateBackupCodes: () => (0, js_1.regenerateBackupCodes)(client),
+        listPasskeys: () => (0, js_1.listPasskeys)(client),
+        removePasskey: (id) => (0, js_1.removePasskey)(client, id),
+        unlinkExternalAccount: (id) => (0, js_1.unlinkExternalAccount)(client, id),
+        getNotificationPreferences: () => (0, js_1.getNotificationPreferences)(client),
+        updateNotificationPreferences: (preferences) => (0, js_1.updateNotificationPreferences)(client, preferences),
     };
 }
-/** `const { changePassword } = useAccountSecurity();` bound to the provider's bearer-authenticated client. */
-function useAccountSecurity() {
-    const client = (0, policies_1.useExpoFapiClient)();
-    return (0, react_1.useMemo)(() => (client ? createAccountSecurityActions(client) : null), [client]);
-}
 //# sourceMappingURL=account-security.js.map

package/dist/account-security.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-security.js","sourceRoot":"","sources":["../src/account-security.ts"],"names":[],"mappings":";;;AAYA,oEAOC;AAGD,gDAGC;AAzBD;;;;GAIG;AACH,iCAAgC;AAChC,sCAAsH;AAG7G,+FAHA,mBAAc,OAGA;AAAe,mGAHb,uBAAkB,OAGa;AAAE,oGAHb,wBAAmB,OAGa;AAApD,4FAHyC,gBAAW,OAGzC;AAFpC,yCAA+C;AAI/C,2FAA2F;AAC3F,SAAgB,4BAA4B,CAAC,MAAkB;IAC7D,OAAO;QACL,cAAc,EAAE,CAAC,KAAuD,EAAE,EAAE,CAAC,IAAA,mBAAc,EAAC,MAAM,EAAE,KAAK,CAAC;QAC1G,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAA,gBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC;QAChE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,uBAAkB,EAAC,MAAM,CAAC;QACpD,mBAAmB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,wBAAmB,EAAC,MAAM,EAAE,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,8GAA8G;AAC9G,SAAgB,kBAAkB;IAChC,MAAM,MAAM,GAAG,IAAA,4BAAiB,GAAE,CAAC;IACnC,OAAO,IAAA,eAAO,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"account-security.js","sourceRoot":"","sources":["../src/account-security.ts"],"names":[],"mappings":";;;AA0DA,oEAuBC;AAjFD;;;;;;;;;GASG;AACH,sCAsBuB;AAGrB,+FAxBA,mBAAc,OAwBA;AAkBd,2GAzCA,+BAA0B,OAyCA;AAV1B,+FA9BA,mBAAc,OA8BA;AAOd,6FApCA,iBAAY,OAoCA;AAVZ,6FAzBA,iBAAY,OAyBA;AAHZ,mGArBA,uBAAkB,OAqBA;AAYlB,sGAhCA,0BAAqB,OAgCA;AADrB,gGA9BA,oBAAe,OA8BA;AAGf,8FAhCA,kBAAa,OAgCA;AATb,kGAtBA,sBAAiB,OAsBA;AAHjB,wGAlBA,4BAAuB,OAkBA;AAEvB,qGAnBA,yBAAoB,OAmBA;AAHpB,oGAfA,wBAAmB,OAeA;AAFnB,4FAZA,gBAAW,OAYA;AAUX,yFArBA,aAAQ,OAqBA;AAFR,0FAlBA,cAAS,OAkBA;AAQT,sGAzBA,0BAAqB,OAyBA;AAErB,8GA1BA,kCAA6B,OA0BA;AAP7B,0FAlBA,cAAS,OAkBA;AAFT,2FAfA,eAAU,OAeA;AAYZ,2FAA2F;AAC3F,SAAgB,4BAA4B,CAAC,MAAkB;IAC7D,OAAO;QACL,cAAc,EAAE,CAAC,KAAuD,EAAE,EAAE,CAAC,IAAA,mBAAc,EAAC,MAAM,EAAE,KAAK,CAAC;QAC1G,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAA,gBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC;QAChE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,uBAAkB,EAAC,MAAM,CAAC;QACpD,mBAAmB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,wBAAmB,EAAC,MAAM,EAAE,EAAE,CAAC;QACpE,uBAAuB,EAAE,GAAG,EAAE,CAAC,IAAA,4BAAuB,EAAC,MAAM,CAAC;QAC9D,YAAY,EAAE,GAAG,EAAE,CAAC,IAAA,iBAAY,EAAC,MAAM,CAAC;QACxC,oBAAoB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,yBAAoB,EAAC,MAAM,EAAE,EAAE,CAAC;QACtE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAiB,EAAC,MAAM,CAAC;QAClD,cAAc,EAAE,GAAG,EAAE,CAAC,IAAA,mBAAc,EAAC,MAAM,CAAC;QAC5C,SAAS,EAAE,GAAG,EAAE,CAAC,IAAA,cAAS,EAAC,MAAM,CAAC;QAClC,UAAU,EAAE,CAAC,QAAgB,EAAE,KAAe,EAAE,EAAE,CAAC,IAAA,eAAU,EAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;QACtF,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAA,aAAQ,EAAC,MAAM,EAAE,KAAK,CAAC;QACpD,SAAS,EAAE,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,IAAA,cAAS,EAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QAChF,eAAe,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAA,oBAAe,EAAC,MAAM,EAAE,QAAQ,CAAC;QACxE,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,0BAAqB,EAAC,MAAM,CAAC;QAC1D,YAAY,EAAE,GAAG,EAAE,CAAC,IAAA,iBAAY,EAAC,MAAM,CAAC;QACxC,aAAa,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,kBAAa,EAAC,MAAM,EAAE,EAAE,CAAC;QACxD,qBAAqB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,0BAAqB,EAAC,MAAM,EAAE,EAAE,CAAC;QACxE,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,+BAA0B,EAAC,MAAM,CAAC;QACpE,6BAA6B,EAAE,CAAC,WAAoC,EAAE,EAAE,CAAC,IAAA,kCAA6B,EAAC,MAAM,EAAE,WAAW,CAAC;KAC5H,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -9,3 +9,5 @@ export * from './bridge';
 export * from './app-approval';
 export * from './account-security';
 export { getCaptchaToken, solveAtlasChallengeNative, atlasHeadlessCaptchaSolver, installAtlasCaptchaSolver, type SolveCaptchaOptions, type GetCaptchaTokenOptions, } from '@atlasauth/react-native';
+export * from './account-security-hook';
+export * from './step-up';

package/dist/index.js

@@ -59,4 +59,6 @@ Object.defineProperty(exports, "getCaptchaToken", { enumerable: true, get: funct
 Object.defineProperty(exports, "solveAtlasChallengeNative", { enumerable: true, get: function () { return react_native_1.solveAtlasChallengeNative; } });
 Object.defineProperty(exports, "atlasHeadlessCaptchaSolver", { enumerable: true, get: function () { return react_native_1.atlasHeadlessCaptchaSolver; } });
 Object.defineProperty(exports, "installAtlasCaptchaSolver", { enumerable: true, get: function () { return react_native_1.installAtlasCaptchaSolver; } });
+__exportStar(require("./account-security-hook"), exports);
+__exportStar(require("./step-up"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,2EAA2E;AAC3E,kEAAkE;AAClE,gDAA8B;AAC9B,gDAA8B;AAC9B,kDAAgC;AAEhC,8EAA8E;AAC9E,mDAAiC;AAEjC;;;;;;;;;;GAUG;AACH,0CAW0B;AAVxB,gGAAA,OAAO,OAAA;AACP,gGAAA,OAAO,OAAA;AACP,mGAAA,UAAU,OAAA;AACV,uGAAA,cAAc,OAAA;AACd,wGAAA,eAAe,OAAA;AACf,iGAAA,QAAQ,OAAA;AACR,kGAAA,SAAS,OAAA;AACT,gGAAA,OAAO,OAAA;AACP,qGAAA,YAAY,OAAA;AACZ,oGAAA,WAAW,OAAA;AAGb,oGAAoG;AACpG,6CAA2B;AAE3B,mGAAmG;AACnG,2CAAyB;AACzB,2CAAyB;AACzB,iDAA+B;AAC/B,qDAAmC;AAEnC,mFAAmF;AACnF,+EAA+E;AAC/E,4DAA4D;AAC5D,wDAOiC;AAN/B,+GAAA,eAAe,OAAA;AACf,yHAAA,yBAAyB,OAAA;AACzB,0HAAA,0BAA0B,OAAA;AAC1B,yHAAA,yBAAyB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,2EAA2E;AAC3E,kEAAkE;AAClE,gDAA8B;AAC9B,gDAA8B;AAC9B,kDAAgC;AAEhC,8EAA8E;AAC9E,mDAAiC;AAEjC;;;;;;;;;;GAUG;AACH,0CAW0B;AAVxB,gGAAA,OAAO,OAAA;AACP,gGAAA,OAAO,OAAA;AACP,mGAAA,UAAU,OAAA;AACV,uGAAA,cAAc,OAAA;AACd,wGAAA,eAAe,OAAA;AACf,iGAAA,QAAQ,OAAA;AACR,kGAAA,SAAS,OAAA;AACT,gGAAA,OAAO,OAAA;AACP,qGAAA,YAAY,OAAA;AACZ,oGAAA,WAAW,OAAA;AAGb,oGAAoG;AACpG,6CAA2B;AAE3B,mGAAmG;AACnG,2CAAyB;AACzB,2CAAyB;AACzB,iDAA+B;AAC/B,qDAAmC;AAEnC,mFAAmF;AACnF,+EAA+E;AAC/E,4DAA4D;AAC5D,wDAOiC;AAN/B,+GAAA,eAAe,OAAA;AACf,yHAAA,yBAAyB,OAAA;AACzB,0HAAA,0BAA0B,OAAA;AAC1B,yHAAA,yBAAyB,OAAA;AAI3B,0DAAwC;AACxC,4CAA0B"}

package/dist/step-up.d.ts

@@ -0,0 +1,14 @@
+import { type FapiClient, type StepUpFlowOptions } from '@atlasauth/js';
+export type { StepUpChoice, StepUpFactor, StepUpRequest } from '@atlasauth/js';
+export { StepUpCancelledError, stepUpRequirement } from '@atlasauth/js';
+export type UseStepUpOptions = Omit<StepUpFlowOptions, 'client'>;
+/** The step-up calls bound to a client; separated from React so it is testable with a fake one. */
+export declare function createExpoStepUp(client: FapiClient, options: UseStepUpOptions): {
+    withStepUp<T>(call: () => Promise<import("@atlasauth/js").FapiResponse<T>>): Promise<import("@atlasauth/js").FapiResponse<T>>;
+    reauthenticate(action?: string): Promise<import("@atlasauth/js").StepUpResult>;
+};
+/** `withStepUp(call)` and `reauthenticate()` on the provider's bearer-authenticated client. */
+export declare function useStepUp(options: UseStepUpOptions): {
+    withStepUp<T>(call: () => Promise<import("@atlasauth/js").FapiResponse<T>>): Promise<import("@atlasauth/js").FapiResponse<T>>;
+    reauthenticate(action?: string): Promise<import("@atlasauth/js").StepUpResult>;
+};

package/dist/step-up.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stepUpRequirement = exports.StepUpCancelledError = void 0;
+exports.createExpoStepUp = createExpoStepUp;
+exports.useStepUp = useStepUp;
+/**
+ * Re-authenticate from a native app, on the bearer session, with no sign-out.
+ *
+ * ```ts
+ * const { withStepUp } = useStepUp({
+ *   choose: ({ factors, error }) => askWithYourOwnSheet(factors, error), // → { strategy: 'totp', code } | { strategy: 'passkey' } | null
+ *   passkeyAssertion: nativePasskeyAssertion(Passkey),                   // from @atlasauth/expo-passkeys
+ * });
+ * const res = await withStepUp(() => enrollTotp(client));
+ * ```
+ *
+ * `choose` is only offered the factors the account holds and the refusal accepts.
+ * The re-minted session token the server returns is stored by the provider's token
+ * cache like any other rotated token.
+ */
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const policies_1 = require("./policies");
+var js_2 = require("@atlasauth/js");
+Object.defineProperty(exports, "StepUpCancelledError", { enumerable: true, get: function () { return js_2.StepUpCancelledError; } });
+Object.defineProperty(exports, "stepUpRequirement", { enumerable: true, get: function () { return js_2.stepUpRequirement; } });
+/** The step-up calls bound to a client; separated from React so it is testable with a fake one. */
+function createExpoStepUp(client, options) {
+    return (0, js_1.createStepUp)({ client, ...options });
+}
+/** `withStepUp(call)` and `reauthenticate()` on the provider's bearer-authenticated client. */
+function useStepUp(options) {
+    const client = (0, policies_1.useExpoFapiClient)();
+    // The latest callbacks without re-creating the actions on every render.
+    const latest = (0, react_1.useRef)(options);
+    latest.current = options;
+    return (0, react_1.useMemo)(() => createExpoStepUp(client, {
+        choose: (request) => latest.current.choose(request),
+        passkeyAssertion: (challenge) => {
+            const provider = latest.current.passkeyAssertion;
+            if (!provider)
+                throw new Error('Pass passkeyAssertion to useStepUp to use a passkey.');
+            return provider(challenge);
+        },
+        ...(options.maxAttempts ? { maxAttempts: options.maxAttempts } : {}),
+    }), 
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [client]);
+}
+//# sourceMappingURL=step-up.js.map

package/dist/step-up.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-up.js","sourceRoot":"","sources":["../src/step-up.ts"],"names":[],"mappings":";;;AAyBA,4CAEC;AAGD,8BAmBC;AAjDD;;;;;;;;;;;;;;GAcG;AACH,iCAAwC;AACxC,sCAAsF;AACtF,yCAA+C;AAG/C,oCAAwE;AAA/D,0GAAA,oBAAoB,OAAA;AAAE,uGAAA,iBAAiB,OAAA;AAIhD,mGAAmG;AACnG,SAAgB,gBAAgB,CAAC,MAAkB,EAAE,OAAyB;IAC5E,OAAO,IAAA,iBAAY,EAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,+FAA+F;AAC/F,SAAgB,SAAS,CAAC,OAAyB;IACjD,MAAM,MAAM,GAAG,IAAA,4BAAiB,GAAE,CAAC;IACnC,wEAAwE;IACxE,MAAM,MAAM,GAAG,IAAA,cAAM,EAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,OAAO,IAAA,eAAO,EACZ,GAAG,EAAE,CACH,gBAAgB,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACnD,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACjD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACvF,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACJ,uDAAuD;IACvD,CAAC,MAAM,CAAC,CACT,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,14 +1,35 @@
 {
   "name": "@atlasauth/expo",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./account-security": {
+      "types": "./dist/account-security.d.ts",
+      "default": "./dist/account-security.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "account-security": [
+        "./dist/account-security.d.ts"
+      ]
+    }
+  },
+  "sideEffects": [
+    "./dist/index.js"
+  ],
   "dependencies": {
-    "@atlasauth/react-native": "^0.8.0",
-    "@atlasauth/react": "^0.35.0"
+    "@atlasauth/react": "^0.35.0",
+    "@atlasauth/react-native": "^0.8.0"
   },
   "peerDependencies": {
-    "@atlasauth/js": ">=0.40.0 <1.0.0",
+    "@atlasauth/js": ">=0.42.0 <1.0.0",
     "react": ">=18",
     "react-native": ">=0.73",
     "expo-secure-store": ">=12",
@@ -37,7 +58,7 @@
     "react": "^18.3.1",
     "typescript": "^5.6.3",
     "vitest": "^3.2.7",
-    "@atlasauth/js": "0.40.0"
+    "@atlasauth/js": "0.42.0"
   },
   "publishConfig": {
     "access": "public"