@atzentis/auth-react 0.0.12 → 0.0.14

package/dist/index.d.ts

@@ -1,7 +1,408 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
+import { ReactNode } from 'react';
 import * as _atzentis_auth_sdk from '@atzentis/auth-sdk';
-import { AuthClient, User, Session, AuthError, LoginAlert, ITokenStorage, LoginCredentials, SignupData } from '@atzentis/auth-sdk';
+import { AuthClient, User, Session, AuthError, LoginAlert, ITokenStorage, ApiKey, CreateApiKeyRequest, UpdateApiKeyRequest, LoginCredentials, UsernameLoginCredentials, SignupData, GetOAuthUrlRequest, VerifyOAuthCodeRequest, SendMagicLinkRequest, VerifyMagicLinkRequest, Device, LoginEvent, ListLoginEventsRequest, Organization, CreateOrganizationRequest, UpdateOrganizationRequest, ListMembersRequest, UpdateMemberRequest, InviteMemberRequest, ListInvitationsRequest, AcceptInvitationRequest, DeclineInvitationRequest, DeviceSession, RevokeAllSessionsOptions, UserUpdate, ConnectOAuthRequest, OAuthProvider } from '@atzentis/auth-sdk';
+import { z } from 'zod';
+
+/**
+ * Centralized localization for all @atzentis/auth-react components.
+ *
+ * This const object contains all default English strings.
+ * The `AuthLocalization` type is derived as `Partial<typeof authLocalization>`.
+ *
+ * Pass a partial override to AuthProvider:
+ * ```tsx
+ * const de: AuthLocalization = { SIGN_IN: "Anmelden", ... };
+ * <AuthProvider localization={de}>
+ * ```
+ */
+declare const authLocalization: {
+    INVALID_CREDENTIALS: string;
+    EMAIL_NOT_VERIFIED: string;
+    TWO_FACTOR_REQUIRED: string;
+    INVALID_PHONE_NUMBER: string;
+    OTP_EXPIRED: string;
+    OTP_INVALID: string;
+    OTP_MAX_ATTEMPTS: string;
+    PHONE_NUMBER_IN_USE: string;
+    FRAUD_DETECTED: string;
+    USERNAME_TAKEN: string;
+    USERNAME_INVALID: string;
+    USERNAME_RESERVED: string;
+    DEVICE_NOT_FOUND: string;
+    LOGIN_EVENT_NOT_FOUND: string;
+    REAUTH_REQUIRED: string;
+    MAX_SESSIONS_EXCEEDED: string;
+    CAPTCHA_REQUIRED: string;
+    CAPTCHA_INVALID: string;
+    PASSWORD_BREACHED: string;
+    SESSION_EXPIRED: string;
+    TOKEN_EXPIRED: string;
+    INVALID_TOKEN: string;
+    UNAUTHORIZED_ROLE: string;
+    ORGANIZATION_NOT_FOUND: string;
+    PERMISSION_DENIED: string;
+    RATE_LIMITED: string;
+    NETWORK_ERROR: string;
+    TIMEOUT: string;
+    USER_NOT_FOUND: string;
+    USER_ALREADY_EXISTS: string;
+    INVALID_EMAIL: string;
+    WEAK_PASSWORD: string;
+    ORG_LIMIT_EXCEEDED: string;
+    MEMBER_LIMIT_EXCEEDED: string;
+    KEY_NOT_FOUND: string;
+    KEY_REVOKED: string;
+    KEY_EXPIRED: string;
+    /** @default "Continue" */
+    CONTINUE: string;
+    /** @default "Cancel" */
+    CANCEL: string;
+    /** @default "Save" */
+    SAVE: string;
+    /** @default "Delete" */
+    DELETE: string;
+    /** @default "Update" */
+    UPDATE: string;
+    /** @default "Remove" */
+    REMOVE: string;
+    /** @default "Done" */
+    DONE: string;
+    /** @default "Go back" */
+    GO_BACK: string;
+    /** @default "Loading..." */
+    LOADING: string;
+    /** @default "Load more" */
+    LOAD_MORE: string;
+    /** @default "Unknown" */
+    UNKNOWN: string;
+    /** @default "Request failed" */
+    REQUEST_FAILED: string;
+    /** @default "Updated successfully" */
+    UPDATED_SUCCESSFULLY: string;
+    /** @default "Sign in" */
+    SIGN_IN: string;
+    /** @default "Sign in" */
+    SIGN_IN_ACTION: string;
+    /** @default "Enter your email below to sign in" */
+    SIGN_IN_DESCRIPTION: string;
+    /** @default "Enter your username or email to sign in" */
+    SIGN_IN_USERNAME_DESCRIPTION: string;
+    /** @default "Username or email" */
+    SIGN_IN_USERNAME_PLACEHOLDER: string;
+    /** @default "Signing in..." */
+    SIGNING_IN: string;
+    /** @default "m@example.com" */
+    EMAIL_PLACEHOLDER: string;
+    /** @default "Password" */
+    PASSWORD_PLACEHOLDER: string;
+    /** @default "Forgot your password?" */
+    FORGOT_PASSWORD_LINK: string;
+    /** @default "Use phone instead" */
+    USE_PHONE_INSTEAD: string;
+    /** @default "Use email instead" */
+    USE_EMAIL_INSTEAD: string;
+    /** @default "Or continue with" */
+    OR_CONTINUE_WITH: string;
+    /** @default "Sign in with" */
+    SIGN_IN_WITH: string;
+    /** @default "Don't have an account?" */
+    DONT_HAVE_AN_ACCOUNT: string;
+    /** @default "Remember me" */
+    REMEMBER_ME: string;
+    /** @default "Sign up" */
+    SIGN_UP: string;
+    /** @default "Create account" */
+    SIGN_UP_ACTION: string;
+    /** @default "Enter your information to create an account" */
+    SIGN_UP_DESCRIPTION: string;
+    /** @default "Check your email for the verification link." */
+    SIGN_UP_EMAIL: string;
+    /** @default "Name" */
+    NAME_PLACEHOLDER: string;
+    /** @default "Please enter your full name." */
+    NAME_DESCRIPTION: string;
+    /** @default "Username" */
+    USERNAME_PLACEHOLDER: string;
+    /** @default "Username" */
+    USERNAME: string;
+    /** @default "Confirm password" */
+    CONFIRM_PASSWORD_PLACEHOLDER: string;
+    /** @default "Already have an account?" */
+    ALREADY_HAVE_AN_ACCOUNT: string;
+    /** @default "I accept the terms and conditions" */
+    ACCEPT_TERMS: string;
+    /** @default "You must accept the terms" */
+    ACCEPT_TERMS_ERROR: string;
+    /** @default "By continuing, you agree to the" */
+    BY_CONTINUING_YOU_AGREE: string;
+    /** @default "Terms of Service" */
+    TERMS_OF_SERVICE: string;
+    /** @default "Privacy Policy" */
+    PRIVACY_POLICY: string;
+    /** @default "Phone number" */
+    PHONE_NUMBER_PLACEHOLDER: string;
+    /** @default "Country code" */
+    COUNTRY_CODE: string;
+    /** @default "Send code" */
+    SEND_VERIFICATION_CODE: string;
+    /** @default "Sending code..." */
+    SENDING_VERIFICATION_CODE: string;
+    /** @default "One-Time Password" */
+    ONE_TIME_PASSWORD: string;
+    /** @default "Verification code" */
+    VERIFICATION_CODE_LABEL: string;
+    /** @default "Verify" */
+    VERIFY: string;
+    /** @default "Verifying..." */
+    VERIFYING: string;
+    /** @default "Code expires in" */
+    CODE_EXPIRES_IN: string;
+    /** @default "Resend code" */
+    RESEND_CODE: string;
+    /** @default "Sign in with password" */
+    USE_PASSWORD_INSTEAD: string;
+    /** @default "Continue with" */
+    CONTINUE_WITH: string;
+    /** @default "Redirecting..." */
+    REDIRECTING: string;
+    /** @default "Magic Link" */
+    MAGIC_LINK: string;
+    /** @default "Send magic link" */
+    MAGIC_LINK_ACTION: string;
+    /** @default "Enter your email to receive a magic link" */
+    MAGIC_LINK_DESCRIPTION: string;
+    /** @default "We sent a magic link to" */
+    MAGIC_LINK_EMAIL: string;
+    /** @default "Check your inbox and click the link to sign in." */
+    MAGIC_LINK_HINT: string;
+    /** @default "Sending..." */
+    SENDING: string;
+    /** @default "Resend" */
+    RESEND: string;
+    /** @default "Resending..." */
+    RESENDING: string;
+    /** @default "Password" */
+    PASSWORD: string;
+    /** @default "New Password" */
+    NEW_PASSWORD: string;
+    /** @default "Current Password" */
+    CURRENT_PASSWORD: string;
+    /** @default "Change Password" */
+    CHANGE_PASSWORD: string;
+    /** @default "Enter your current and new password" */
+    CHANGE_PASSWORD_DESCRIPTION: string;
+    /** @default "Password has been changed" */
+    CHANGE_PASSWORD_SUCCESS: string;
+    /** @default "Forgot Password" */
+    FORGOT_PASSWORD: string;
+    /** @default "Send reset link" */
+    FORGOT_PASSWORD_ACTION: string;
+    /** @default "Enter your email to reset your password" */
+    FORGOT_PASSWORD_DESCRIPTION: string;
+    /** @default "Check your email for the reset link" */
+    FORGOT_PASSWORD_EMAIL: string;
+    /** @default "Reset Password" */
+    RESET_PASSWORD: string;
+    /** @default "Save new password" */
+    RESET_PASSWORD_ACTION: string;
+    /** @default "Password reset successfully" */
+    RESET_PASSWORD_SUCCESS: string;
+    /** @default "Set Password" */
+    SET_PASSWORD: string;
+    /** @default "Click the button to receive an email to set your password" */
+    SET_PASSWORD_DESCRIPTION: string;
+    /** @default "Current Session" */
+    CURRENT_SESSION: string;
+    /** @default "Current device" */
+    CURRENT_DEVICE: string;
+    /** @default "Sessions" */
+    SESSIONS: string;
+    /** @default "Manage your active sessions" */
+    SESSIONS_DESCRIPTION: string;
+    /** @default "Trust" */
+    TRUST_DEVICE: string;
+    /** @default "Untrust" */
+    UNTRUST_DEVICE: string;
+    /** @default "Loading devices..." */
+    LOADING_DEVICES: string;
+    /** @default "No devices found" */
+    NO_DEVICES: string;
+    /** @default "Last used:" */
+    LAST_USED: string;
+    /** @default "IP:" */
+    IP_LABEL: string;
+    /** @default "Security" */
+    SECURITY: string;
+    /** @default "Session not fresh. Please sign in again." */
+    SESSION_NOT_FRESH: string;
+    /** @default "Login Activity" */
+    LOGIN_ACTIVITY: string;
+    /** @default "Recent login attempts" */
+    LOGIN_ACTIVITY_DESCRIPTION: string;
+    /** @default "Low" */
+    RISK_LOW: string;
+    /** @default "Medium" */
+    RISK_MEDIUM: string;
+    /** @default "High" */
+    RISK_HIGH: string;
+    /** @default "This was me" */
+    MARK_RECOGNIZED: string;
+    /** @default "Not me" */
+    REPORT_SUSPICIOUS: string;
+    /** @default "Loading activity..." */
+    LOADING_ACTIVITY: string;
+    /** @default "No login activity found" */
+    NO_ACTIVITY: string;
+    /** @default "Accounts" */
+    ACCOUNTS: string;
+    /** @default "Manage signed in accounts" */
+    ACCOUNTS_DESCRIPTION: string;
+    /** @default "Add account" */
+    ADD_ACCOUNT: string;
+    /** @default "Switch Account" */
+    SWITCH_ACCOUNT: string;
+    /** @default "Select account" */
+    SELECT_ACCOUNT: string;
+    /** @default "Personal Account" */
+    PERSONAL_ACCOUNT: string;
+    /** @default "Sign out" */
+    SIGN_OUT: string;
+    /** @default "Organization" */
+    ORGANIZATION: string;
+    /** @default "Organizations" */
+    ORGANIZATIONS: string;
+    /** @default "Manage your organizations" */
+    ORGANIZATIONS_DESCRIPTION: string;
+    /** @default "Select organization" */
+    SELECT_ORGANIZATION: string;
+    /** @default "Create organization" */
+    CREATE_ORGANIZATION: string;
+    /** @default "Name" */
+    ORGANIZATION_NAME: string;
+    /** @default "Acme Inc." */
+    ORGANIZATION_NAME_PLACEHOLDER: string;
+    /** @default "Leave Organization" */
+    LEAVE_ORGANIZATION: string;
+    /** @default "Delete Organization" */
+    DELETE_ORGANIZATION: string;
+    /** @default "Members" */
+    MEMBERS: string;
+    /** @default "Invite Member" */
+    INVITE_MEMBER: string;
+    /** @default "Remove Member" */
+    REMOVE_MEMBER: string;
+    /** @default "Role" */
+    ROLE: string;
+    /** @default "Admin" */
+    ADMIN: string;
+    /** @default "Member" */
+    MEMBER: string;
+    /** @default "Owner" */
+    OWNER: string;
+    /** @default "Settings" */
+    SETTINGS: string;
+    /** @default "Account" */
+    ACCOUNT: string;
+    /** @default "Avatar" */
+    AVATAR: string;
+    /** @default "Click avatar to upload a custom one" */
+    AVATAR_DESCRIPTION: string;
+    /** @default "Delete Avatar" */
+    DELETE_AVATAR: string;
+    /** @default "Upload Avatar" */
+    UPLOAD_AVATAR: string;
+    /** @default "Email" */
+    EMAIL: string;
+    /** @default "Name" */
+    NAME: string;
+    /** @default "Two-Factor" */
+    TWO_FACTOR: string;
+    /** @default "Two-Factor Authentication" */
+    TWO_FACTOR_PROMPT: string;
+    /** @default "Enter your one-time password" */
+    TWO_FACTOR_DESCRIPTION: string;
+    /** @default "Verify code" */
+    TWO_FACTOR_ACTION: string;
+    /** @default "Two-factor authentication has been enabled" */
+    TWO_FACTOR_ENABLED: string;
+    /** @default "Two-factor authentication has been disabled" */
+    TWO_FACTOR_DISABLED: string;
+    /** @default "Enable Two-Factor" */
+    ENABLE_TWO_FACTOR: string;
+    /** @default "Disable Two-Factor" */
+    DISABLE_TWO_FACTOR: string;
+    /** @default "Backup Codes" */
+    BACKUP_CODES: string;
+    /** @default "Save these codes in a secure place" */
+    BACKUP_CODES_DESCRIPTION: string;
+    /** @default "Passwords do not match" */
+    PASSWORDS_DO_NOT_MATCH: string;
+    /** @default "Password is required" */
+    PASSWORD_REQUIRED: string;
+    /** @default "Email address is required" */
+    EMAIL_REQUIRED: string;
+    /** @default "is required" */
+    IS_REQUIRED: string;
+    /** @default "is invalid" */
+    IS_INVALID: string;
+};
+type AuthLocalization = Partial<typeof authLocalization>;
+
+declare const AUTH_ERROR_CODES: {
+    INVALID_CREDENTIALS: string;
+    EMAIL_NOT_VERIFIED: string;
+    TWO_FACTOR_REQUIRED: string;
+    INVALID_PHONE_NUMBER: string;
+    OTP_EXPIRED: string;
+    OTP_INVALID: string;
+    OTP_MAX_ATTEMPTS: string;
+    PHONE_NUMBER_IN_USE: string;
+    FRAUD_DETECTED: string;
+    USERNAME_TAKEN: string;
+    USERNAME_INVALID: string;
+    USERNAME_RESERVED: string;
+    DEVICE_NOT_FOUND: string;
+    LOGIN_EVENT_NOT_FOUND: string;
+    REAUTH_REQUIRED: string;
+    MAX_SESSIONS_EXCEEDED: string;
+    CAPTCHA_REQUIRED: string;
+    CAPTCHA_INVALID: string;
+    PASSWORD_BREACHED: string;
+    SESSION_EXPIRED: string;
+    TOKEN_EXPIRED: string;
+    INVALID_TOKEN: string;
+    UNAUTHORIZED_ROLE: string;
+    ORGANIZATION_NOT_FOUND: string;
+    PERMISSION_DENIED: string;
+    RATE_LIMITED: string;
+    NETWORK_ERROR: string;
+    TIMEOUT: string;
+    USER_NOT_FOUND: string;
+    USER_ALREADY_EXISTS: string;
+    INVALID_EMAIL: string;
+    WEAK_PASSWORD: string;
+    ORG_LIMIT_EXCEEDED: string;
+    MEMBER_LIMIT_EXCEEDED: string;
+    KEY_NOT_FOUND: string;
+    KEY_REVOKED: string;
+    KEY_EXPIRED: string;
+};
+
+/**
+ * Gets a localized error message from an error object.
+ *
+ * When `localizeErrors` is true, looks up the error code directly
+ * in the localization dictionary (error codes are localization keys).
+ *
+ * Fallback chain:
+ * 1. localization[error.code] (if AuthError and localizeErrors)
+ * 2. error.message
+ * 3. localization.REQUEST_FAILED
+ * 4. "Request failed"
+ */
+declare function getLocalizedError(error: unknown, localization: AuthLocalization, localizeErrors: boolean): string;
 
 interface AuthProviderProps {
     apiKey?: string;
@@ -17,6 +418,8 @@ interface AuthProviderProps {
     initialToken?: string;
     initialUser?: User;
     storage?: ITokenStorage;
+    localization?: AuthLocalization;
+    localizeErrors?: boolean;
 }
 interface AuthContextValue {
     client: AuthClient;
@@ -32,7 +435,26 @@ interface AuthContextValue {
 }
 
 declare const AuthContext: react.Context<AuthContextValue | null>;
-declare function AuthProvider({ apiKey, baseUrl, autoRefreshToken, refreshThreshold, timeout, collectDeviceSignals, onSessionExpired, onTokenRefreshed, onNewDeviceAlert, children, initialUser, storage, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
+interface LocalizationContextValue {
+    overrides: AuthLocalization | null;
+    localizeErrors: boolean;
+}
+declare const LocalizationContext: react.Context<LocalizationContextValue>;
+declare function AuthProvider({ apiKey, baseUrl, autoRefreshToken, refreshThreshold, timeout, collectDeviceSignals, onSessionExpired, onTokenRefreshed, onNewDeviceAlert, children, initialUser, storage, localization, localizeErrors, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
+
+declare function useApiKeys(): {
+    apiKeys: ApiKey[];
+    isLoading: boolean;
+    error: AuthError | null;
+    refresh: () => Promise<void>;
+    create: (data: CreateApiKeyRequest) => Promise<_atzentis_auth_sdk.CreateApiKeyResponse>;
+    get: (keyId: string) => Promise<ApiKey>;
+    update: (keyId: string, data: UpdateApiKeyRequest) => Promise<ApiKey>;
+    rotate: (keyId: string) => Promise<_atzentis_auth_sdk.RotateApiKeyResponse>;
+    revoke: (keyId: string) => Promise<void>;
+    validate: (keyString: string) => Promise<_atzentis_auth_sdk.ValidateApiKeyResponse>;
+    getUsage: (keyId: string) => Promise<_atzentis_auth_sdk.ApiKeyUsage>;
+};
 
 declare function useAuth(): {
     user: _atzentis_auth_sdk.User | null;
@@ -40,12 +462,92 @@ declare function useAuth(): {
     isLoading: boolean;
     error: _atzentis_auth_sdk.AuthError | null;
     login: (credentials: LoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    loginWithUsername: (credentials: UsernameLoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
     signup: (data: SignupData) => Promise<_atzentis_auth_sdk.SignupResponse>;
+    logout: () => Promise<void>;
+    logoutAllDevices: () => Promise<void>;
+    getOAuthUrl: (config: GetOAuthUrlRequest) => string;
+    verifyOAuthCode: (request: VerifyOAuthCodeRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    sendMagicLink: (request: SendMagicLinkRequest) => Promise<void>;
+    verifyMagicLink: (request: VerifyMagicLinkRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    isUsernameAvailable: (username: string) => Promise<boolean>;
+    getAccessToken: () => Promise<string | null>;
+    refreshToken: () => Promise<_atzentis_auth_sdk.RefreshTokenResponse>;
+    getAuthHeader: () => Promise<{
+        Authorization: string;
+    } | {
+        Authorization?: undefined;
+    }>;
     clearError: () => void;
 };
 
 declare function useAuthContext(): AuthContextValue;
 
+interface UseAuthLocalizationResult {
+    localization: Required<AuthLocalization>;
+    localizeErrors: boolean;
+}
+declare function useAuthLocalization(): UseAuthLocalizationResult;
+
+declare function useDevices(): {
+    devices: Device[];
+    currentDevice: Device | null;
+    isLoading: boolean;
+    error: AuthError | null;
+    refresh: () => Promise<void>;
+    trustDevice: (id: string) => Promise<void>;
+    untrustDevice: (id: string) => Promise<void>;
+    removeDevice: (id: string) => Promise<void>;
+    removeAllOtherDevices: () => Promise<void>;
+};
+
+interface UseLoginActivityOptions {
+    limit?: number;
+}
+declare function useLoginActivity(options?: UseLoginActivityOptions): {
+    events: LoginEvent[];
+    total: number;
+    hasMore: boolean;
+    isLoading: boolean;
+    error: AuthError | null;
+    refresh: () => Promise<void>;
+    loadMore: () => Promise<void>;
+    filter: (newOptions: ListLoginEventsRequest) => void;
+    markRecognized: (eventId: string) => Promise<void>;
+    reportSuspicious: (eventId: string) => Promise<_atzentis_auth_sdk.ReportSuspiciousResponse>;
+};
+
+declare function useOrganizations(): {
+    organizations: Organization[];
+    isLoading: boolean;
+    error: AuthError | null;
+    refresh: () => Promise<void>;
+    create: (data: CreateOrganizationRequest) => Promise<Organization>;
+    update: (orgId: string, data: UpdateOrganizationRequest) => Promise<Organization>;
+    delete: (orgId: string) => Promise<void>;
+    listMembers: (orgId: string, options?: ListMembersRequest) => Promise<_atzentis_auth_sdk.ListMembersResponse>;
+    updateMember: (orgId: string, userId: string, data: UpdateMemberRequest) => Promise<_atzentis_auth_sdk.Member>;
+    removeMember: (orgId: string, userId: string) => Promise<void>;
+    inviteMember: (orgId: string, data: InviteMemberRequest) => Promise<_atzentis_auth_sdk.Invitation>;
+    listInvitations: (orgId: string, options?: ListInvitationsRequest) => Promise<_atzentis_auth_sdk.ListInvitationsResponse>;
+    resendInvitation: (orgId: string, invitationId: string) => Promise<void>;
+    cancelInvitation: (orgId: string, invitationId: string) => Promise<void>;
+    acceptInvitation: (data: AcceptInvitationRequest) => Promise<void>;
+    declineInvitation: (data: DeclineInvitationRequest) => Promise<void>;
+    leave: (orgId: string) => Promise<void>;
+};
+
+declare function usePhone(): {
+    isSending: boolean;
+    isVerifying: boolean;
+    codeSent: boolean;
+    expiresIn: number | null;
+    error: AuthError | null;
+    sendOTP: (phoneNumber: string) => Promise<_atzentis_auth_sdk.SendOTPResponse>;
+    verify: (phoneNumber: string, code: string) => Promise<_atzentis_auth_sdk.VerifyOTPResponse>;
+    signIn: (phoneNumber: string, password: string) => Promise<_atzentis_auth_sdk.LoginResponse>;
+};
+
 declare function useSession(): {
     user: _atzentis_auth_sdk.User | null;
     session: _atzentis_auth_sdk.Session | null;
@@ -53,4 +555,281 @@ declare function useSession(): {
     isLoading: boolean;
 };
 
-export { AuthContext, type AuthContextValue, AuthProvider, type AuthProviderProps, useAuth, useAuthContext, useSession };
+declare function useSessions(): {
+    session: Session | null;
+    sessions: Session[];
+    deviceSessions: DeviceSession[];
+    isLoading: boolean;
+    error: AuthError | null;
+    refresh: () => Promise<void>;
+    revokeSession: (id: string) => Promise<void>;
+    revokeAllSessions: (options?: RevokeAllSessionsOptions) => Promise<void>;
+    switchAccount: (sessionToken: string) => Promise<void>;
+    revokeDeviceSession: (sessionToken: string) => Promise<void>;
+};
+
+declare function useUser(): {
+    user: _atzentis_auth_sdk.User | null;
+    isLoading: boolean;
+    error: AuthError | null;
+    updateProfile: (data: UserUpdate) => Promise<_atzentis_auth_sdk.User>;
+    changePassword: (currentPassword: string, newPassword: string) => Promise<void>;
+    setupTwoFactor: () => Promise<_atzentis_auth_sdk.TwoFactorSetup>;
+    verifyTwoFactorSetup: (code: string) => Promise<void>;
+    disableTwoFactor: (password: string) => Promise<void>;
+    deleteAccount: (password: string, reason?: string) => Promise<void>;
+    listConnectedProviders: () => Promise<_atzentis_auth_sdk.ConnectedProvider[]>;
+    connectOAuthProvider: (data: ConnectOAuthRequest) => Promise<_atzentis_auth_sdk.ConnectedProvider>;
+    disconnectOAuthProvider: (provider: string) => Promise<void>;
+    addPhoneNumber: (phoneNumber: string) => Promise<void>;
+    verifyPhoneNumber: (code: string) => Promise<void>;
+    removePhoneNumber: (password: string) => Promise<void>;
+};
+
+type OAuthConfig = {
+    oauthProviders: OAuthProvider[];
+    oauthRedirectUri: string;
+};
+interface LoginFormBaseProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    enablePhone?: boolean;
+    enableForgotPassword?: boolean;
+    onForgotPasswordClick?: () => void;
+    className?: string;
+}
+type LoginFormProps = LoginFormBaseProps & (OAuthConfig | {
+    oauthProviders?: never;
+});
+interface SignupFormProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    showUsernameField?: boolean;
+    showPhoneField?: boolean;
+    organizationName?: string;
+    acceptTermsRequired?: boolean;
+    onLoginClick?: () => void;
+    className?: string;
+}
+interface PhoneLoginFormProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    allowedCountryCodes?: string[];
+    showPasswordFallback?: boolean;
+    autoFocusOTP?: boolean;
+    className?: string;
+}
+interface OAuthButtonProps {
+    provider: OAuthProvider;
+    redirectUri: string;
+    state?: string;
+    variant?: "filled" | "outline";
+    size?: "sm" | "md" | "lg";
+    className?: string;
+}
+interface MagicLinkFormProps {
+    redirectUrl: string;
+    onSuccess?: () => void;
+    onError?: (error: AuthError) => void;
+    className?: string;
+}
+interface DeviceListProps {
+    showTrustToggle?: boolean;
+    showRemoveAction?: boolean;
+    onDeviceTrusted?: (device: Device) => void;
+    onDeviceUntrusted?: (device: Device) => void;
+    onDeviceRemoved?: (device: Device) => void;
+    renderDeviceIcon?: (device: Device) => ReactNode;
+    className?: string;
+}
+interface LoginActivityFeedProps {
+    limit?: number;
+    showRiskBadge?: boolean;
+    showReportActions?: boolean;
+    filterByStatus?: "success" | "failed" | "blocked";
+    onSuspiciousReported?: (event: LoginEvent) => void;
+    className?: string;
+}
+interface AccountSwitcherProps {
+    showAddAccount?: boolean;
+    onSwitch?: (user: User) => void;
+    onAddAccount?: () => void;
+    maxAccounts?: number;
+    className?: string;
+}
+interface SessionGuardProps {
+    children: ReactNode;
+    fallback: ReactNode;
+    loadingFallback?: ReactNode;
+    freshRequired?: boolean;
+    freshThreshold?: number;
+    requiredRole?: string;
+    className?: string;
+}
+interface UserMenuProps {
+    showOrganization?: boolean;
+    menuItems?: Array<{
+        label: string;
+        onClick: () => void;
+    }>;
+    className?: string;
+}
+interface OrganizationMenuProps {
+    showCreateNew?: boolean;
+    currentOrgId?: string;
+    onSwitch?: (org: Organization) => void;
+    onCreateNew?: () => void;
+    className?: string;
+}
+interface LoadingBoundaryProps {
+    children: ReactNode;
+    spinner?: ReactNode;
+    delay?: number;
+    className?: string;
+}
+
+declare function AccountSwitcher({ showAddAccount, onSwitch, onAddAccount, maxAccounts, className, }: AccountSwitcherProps): react_jsx_runtime.JSX.Element;
+
+declare function SessionGuard({ children, fallback, loadingFallback, freshRequired, freshThreshold, requiredRole, className, }: SessionGuardProps): react_jsx_runtime.JSX.Element;
+
+declare function DeviceList({ showTrustToggle, showRemoveAction, onDeviceTrusted, onDeviceUntrusted, onDeviceRemoved, renderDeviceIcon, className, }: DeviceListProps): react_jsx_runtime.JSX.Element;
+
+declare function LoadingBoundary({ children, spinner, delay, className, }: LoadingBoundaryProps): react_jsx_runtime.JSX.Element | null;
+
+declare function LoginActivityFeed({ limit, showRiskBadge, showReportActions, filterByStatus, onSuspiciousReported, className, }: LoginActivityFeedProps): react_jsx_runtime.JSX.Element;
+
+declare function LoginForm({ onSuccess, onError, enablePhone, enableForgotPassword, onForgotPasswordClick, className, ...oauthProps }: LoginFormProps): react_jsx_runtime.JSX.Element;
+
+declare function MagicLinkForm({ redirectUrl, onSuccess, onError, className }: MagicLinkFormProps): react_jsx_runtime.JSX.Element;
+
+declare function OAuthButton({ provider, redirectUri, state, variant, size, className, }: OAuthButtonProps): react_jsx_runtime.JSX.Element;
+
+declare function PhoneLoginForm({ onSuccess, onError, allowedCountryCodes, showPasswordFallback, className, }: PhoneLoginFormProps): react_jsx_runtime.JSX.Element;
+
+declare function SignupForm({ onSuccess, onError, showUsernameField, showPhoneField, organizationName, acceptTermsRequired, onLoginClick, className, }: SignupFormProps): react_jsx_runtime.JSX.Element;
+
+declare function OrganizationMenu({ showCreateNew, currentOrgId, onSwitch, onCreateNew, className, }: OrganizationMenuProps): react_jsx_runtime.JSX.Element;
+
+declare function UserMenu({ showOrganization, menuItems, className }: UserMenuProps): react_jsx_runtime.JSX.Element | null;
+
+declare const credentialLoginSchema: z.ZodObject<{
+    identity: z.ZodString;
+    password: z.ZodString;
+    captchaToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    identity: string;
+    captchaToken?: string | undefined;
+}, {
+    password: string;
+    identity: string;
+    captchaToken?: string | undefined;
+}>;
+type CredentialLoginFormData = z.infer<typeof credentialLoginSchema>;
+declare const phoneLoginSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhoneLoginFormData = z.infer<typeof phoneLoginSchema>;
+declare const otpVerifySchema$1: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type OtpVerifyFormData$1 = z.infer<typeof otpVerifySchema$1>;
+
+declare const magicLinkSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+type MagicLinkFormData = z.infer<typeof magicLinkSchema>;
+
+declare const phoneNumberSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhoneNumberFormData = z.infer<typeof phoneNumberSchema>;
+declare const otpVerifySchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type OtpVerifyFormData = z.infer<typeof otpVerifySchema>;
+declare const phonePasswordSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    password: string;
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhonePasswordFormData = z.infer<typeof phonePasswordSchema>;
+
+declare const signupSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    name: z.ZodString;
+    username: z.ZodOptional<z.ZodString>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    organizationName: z.ZodOptional<z.ZodString>;
+    acceptTerms: z.ZodBoolean;
+    captchaToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    name: string;
+    email: string;
+    acceptTerms: boolean;
+    captchaToken?: string | undefined;
+    phoneNumber?: string | undefined;
+    username?: string | undefined;
+    organizationName?: string | undefined;
+}, {
+    password: string;
+    name: string;
+    email: string;
+    acceptTerms: boolean;
+    captchaToken?: string | undefined;
+    phoneNumber?: string | undefined;
+    username?: string | undefined;
+    organizationName?: string | undefined;
+}>;
+type SignupFormData = z.infer<typeof signupSchema>;
+
+declare function getInitials(name: string): string;
+
+/**
+ * Safely converts an unknown caught value to AuthError.
+ * If the value is already an AuthError, returns it directly.
+ * Otherwise wraps the message in a new AuthError.
+ */
+declare function toAuthError(error: unknown): AuthError;
+
+type RiskLevel = "low" | "medium" | "high";
+declare function getRiskLevel(score: number): RiskLevel;
+declare const RISK_COLORS: Record<RiskLevel, string>;
+
+export { AUTH_ERROR_CODES, AccountSwitcher, type AccountSwitcherProps, AuthContext, type AuthContextValue, type AuthLocalization, AuthProvider, type AuthProviderProps, type CredentialLoginFormData, DeviceList, type DeviceListProps, LoadingBoundary, type LoadingBoundaryProps, LocalizationContext, type LocalizationContextValue, LoginActivityFeed, type LoginActivityFeedProps, LoginForm, type LoginFormProps, MagicLinkForm, type MagicLinkFormData, type MagicLinkFormProps, OAuthButton, type OAuthButtonProps, OrganizationMenu, type OrganizationMenuProps, type OtpVerifyFormData$1 as OtpVerifyFormData, PhoneLoginForm, type PhoneLoginFormData, type PhoneLoginFormProps, type PhoneNumberFormData, type OtpVerifyFormData as PhoneOtpVerifyFormData, type PhonePasswordFormData, RISK_COLORS, type RiskLevel, SessionGuard, type SessionGuardProps, SignupForm, type SignupFormData, type SignupFormProps, UserMenu, type UserMenuProps, authLocalization, credentialLoginSchema, getInitials, getLocalizedError, getRiskLevel, magicLinkSchema, otpVerifySchema$1 as otpVerifySchema, phoneLoginSchema, phoneNumberSchema, otpVerifySchema as phoneOtpVerifySchema, phonePasswordSchema, signupSchema, toAuthError, useApiKeys, useAuth, useAuthContext, useAuthLocalization, useDevices, useLoginActivity, useOrganizations, usePhone, useSession, useSessions, useUser };