@atzentis/auth-react 0.0.13 → 0.0.15

package/dist/index.d.ts

@@ -1,7 +1,456 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
+import { ReactNode } from 'react';
 import * as _atzentis_auth_sdk from '@atzentis/auth-sdk';
-import { AuthClient, User, Session, AuthError, LoginAlert, ITokenStorage, ApiKey, CreateApiKeyRequest, UpdateApiKeyRequest, LoginCredentials, UsernameLoginCredentials, SignupData, GetOAuthUrlRequest, VerifyOAuthCodeRequest, SendMagicLinkRequest, VerifyMagicLinkRequest, Device, LoginEvent, ListLoginEventsRequest, Organization, CreateOrganizationRequest, UpdateOrganizationRequest, ListMembersRequest, UpdateMemberRequest, InviteMemberRequest, ListInvitationsRequest, AcceptInvitationRequest, DeclineInvitationRequest, DeviceSession, RevokeAllSessionsOptions, UserUpdate, ConnectOAuthRequest } from '@atzentis/auth-sdk';
+import { AuthClient, User, Session, AuthError, LoginAlert, ITokenStorage, ApiKey, CreateApiKeyRequest, UpdateApiKeyRequest, GetOAuthUrlRequest, LoginCredentials, UsernameLoginCredentials, RequestPasswordResetRequest, ResetPasswordRequest, SendMagicLinkRequest, SendVerificationEmailRequest, SignupData, VerifyEmailRequest, VerifyMagicLinkRequest, VerifyOAuthCodeRequest, Device, LoginEvent, ListLoginEventsRequest, Organization, CreateOrganizationRequest, UpdateOrganizationRequest, ListMembersRequest, UpdateMemberRequest, InviteMemberRequest, ListInvitationsRequest, AcceptInvitationRequest, DeclineInvitationRequest, DeviceSession, RevokeAllSessionsOptions, UserUpdate, ConnectOAuthRequest, OAuthProvider } from '@atzentis/auth-sdk';
+import { z } from 'zod';
+
+/**
+ * Centralized localization for all @atzentis/auth-react components.
+ *
+ * This const object contains all default English strings.
+ * The `AuthLocalization` type is derived as `Partial<typeof authLocalization>`.
+ *
+ * Pass a partial override to AuthProvider:
+ * ```tsx
+ * const de: AuthLocalization = { SIGN_IN: "Anmelden", ... };
+ * <AuthProvider localization={de}>
+ * ```
+ */
+declare const authLocalization: {
+    INVALID_CREDENTIALS: string;
+    EMAIL_NOT_VERIFIED: string;
+    TWO_FACTOR_REQUIRED: string;
+    INVALID_PHONE_NUMBER: string;
+    OTP_EXPIRED: string;
+    OTP_INVALID: string;
+    OTP_MAX_ATTEMPTS: string;
+    PHONE_NUMBER_IN_USE: string;
+    FRAUD_DETECTED: string;
+    USERNAME_TAKEN: string;
+    USERNAME_INVALID: string;
+    USERNAME_RESERVED: string;
+    DEVICE_NOT_FOUND: string;
+    LOGIN_EVENT_NOT_FOUND: string;
+    REAUTH_REQUIRED: string;
+    MAX_SESSIONS_EXCEEDED: string;
+    CAPTCHA_REQUIRED: string;
+    CAPTCHA_INVALID: string;
+    PASSWORD_BREACHED: string;
+    SESSION_EXPIRED: string;
+    TOKEN_EXPIRED: string;
+    INVALID_TOKEN: string;
+    UNAUTHORIZED_ROLE: string;
+    ORGANIZATION_NOT_FOUND: string;
+    PERMISSION_DENIED: string;
+    RATE_LIMITED: string;
+    NETWORK_ERROR: string;
+    TIMEOUT: string;
+    USER_NOT_FOUND: string;
+    USER_ALREADY_EXISTS: string;
+    INVALID_EMAIL: string;
+    WEAK_PASSWORD: string;
+    ORG_LIMIT_EXCEEDED: string;
+    MEMBER_LIMIT_EXCEEDED: string;
+    KEY_NOT_FOUND: string;
+    KEY_REVOKED: string;
+    KEY_EXPIRED: string;
+    /** @default "Continue" */
+    CONTINUE: string;
+    /** @default "Cancel" */
+    CANCEL: string;
+    /** @default "Save" */
+    SAVE: string;
+    /** @default "Delete" */
+    DELETE: string;
+    /** @default "Update" */
+    UPDATE: string;
+    /** @default "Remove" */
+    REMOVE: string;
+    /** @default "Done" */
+    DONE: string;
+    /** @default "Go back" */
+    GO_BACK: string;
+    /** @default "Loading..." */
+    LOADING: string;
+    /** @default "Load more" */
+    LOAD_MORE: string;
+    /** @default "Unknown" */
+    UNKNOWN: string;
+    /** @default "Request failed" */
+    REQUEST_FAILED: string;
+    /** @default "Updated successfully" */
+    UPDATED_SUCCESSFULLY: string;
+    /** @default "Sign in" */
+    SIGN_IN: string;
+    /** @default "Sign in" */
+    SIGN_IN_ACTION: string;
+    /** @default "Enter your email below to sign in" */
+    SIGN_IN_DESCRIPTION: string;
+    /** @default "Enter your username or email to sign in" */
+    SIGN_IN_USERNAME_DESCRIPTION: string;
+    /** @default "Username or email" */
+    SIGN_IN_USERNAME_PLACEHOLDER: string;
+    /** @default "Signing in..." */
+    SIGNING_IN: string;
+    /** @default "m@example.com" */
+    EMAIL_PLACEHOLDER: string;
+    /** @default "Password" */
+    PASSWORD_PLACEHOLDER: string;
+    /** @default "Forgot your password?" */
+    FORGOT_PASSWORD_LINK: string;
+    /** @default "Use phone instead" */
+    USE_PHONE_INSTEAD: string;
+    /** @default "Use email instead" */
+    USE_EMAIL_INSTEAD: string;
+    /** @default "Or continue with" */
+    OR_CONTINUE_WITH: string;
+    /** @default "Sign in with" */
+    SIGN_IN_WITH: string;
+    /** @default "Don't have an account?" */
+    DONT_HAVE_AN_ACCOUNT: string;
+    /** @default "Remember me" */
+    REMEMBER_ME: string;
+    /** @default "Sign up" */
+    SIGN_UP: string;
+    /** @default "Create account" */
+    SIGN_UP_ACTION: string;
+    /** @default "Enter your information to create an account" */
+    SIGN_UP_DESCRIPTION: string;
+    /** @default "Check your email for the verification link." */
+    SIGN_UP_EMAIL: string;
+    /** @default "Name" */
+    NAME_PLACEHOLDER: string;
+    /** @default "Please enter your full name." */
+    NAME_DESCRIPTION: string;
+    /** @default "Username" */
+    USERNAME_PLACEHOLDER: string;
+    /** @default "Username" */
+    USERNAME: string;
+    /** @default "Confirm password" */
+    CONFIRM_PASSWORD_PLACEHOLDER: string;
+    /** @default "Already have an account?" */
+    ALREADY_HAVE_AN_ACCOUNT: string;
+    /** @default "I accept the terms and conditions" */
+    ACCEPT_TERMS: string;
+    /** @default "You must accept the terms" */
+    ACCEPT_TERMS_ERROR: string;
+    /** @default "By continuing, you agree to the" */
+    BY_CONTINUING_YOU_AGREE: string;
+    /** @default "Terms of Service" */
+    TERMS_OF_SERVICE: string;
+    /** @default "Privacy Policy" */
+    PRIVACY_POLICY: string;
+    /** @default "Phone number" */
+    PHONE_NUMBER_PLACEHOLDER: string;
+    /** @default "Country code" */
+    COUNTRY_CODE: string;
+    /** @default "Send code" */
+    SEND_VERIFICATION_CODE: string;
+    /** @default "Sending code..." */
+    SENDING_VERIFICATION_CODE: string;
+    /** @default "One-Time Password" */
+    ONE_TIME_PASSWORD: string;
+    /** @default "Verification code" */
+    VERIFICATION_CODE_LABEL: string;
+    /** @default "Verify" */
+    VERIFY: string;
+    /** @default "Verifying..." */
+    VERIFYING: string;
+    /** @default "Code expires in" */
+    CODE_EXPIRES_IN: string;
+    /** @default "Resend code" */
+    RESEND_CODE: string;
+    /** @default "Sign in with password" */
+    USE_PASSWORD_INSTEAD: string;
+    /** @default "Continue with" */
+    CONTINUE_WITH: string;
+    /** @default "Redirecting..." */
+    REDIRECTING: string;
+    /** @default "Magic Link" */
+    MAGIC_LINK: string;
+    /** @default "Send magic link" */
+    MAGIC_LINK_ACTION: string;
+    /** @default "Enter your email to receive a magic link" */
+    MAGIC_LINK_DESCRIPTION: string;
+    /** @default "We sent a magic link to" */
+    MAGIC_LINK_EMAIL: string;
+    /** @default "Check your inbox and click the link to sign in." */
+    MAGIC_LINK_HINT: string;
+    /** @default "Sending..." */
+    SENDING: string;
+    /** @default "Resend" */
+    RESEND: string;
+    /** @default "Resending..." */
+    RESENDING: string;
+    /** @default "Password" */
+    PASSWORD: string;
+    /** @default "New Password" */
+    NEW_PASSWORD: string;
+    /** @default "Current Password" */
+    CURRENT_PASSWORD: string;
+    /** @default "Change Password" */
+    CHANGE_PASSWORD: string;
+    /** @default "Enter your current and new password" */
+    CHANGE_PASSWORD_DESCRIPTION: string;
+    /** @default "Password has been changed" */
+    CHANGE_PASSWORD_SUCCESS: string;
+    /** @default "Forgot Password" */
+    FORGOT_PASSWORD: string;
+    /** @default "Send reset link" */
+    FORGOT_PASSWORD_ACTION: string;
+    /** @default "Enter your email to reset your password" */
+    FORGOT_PASSWORD_DESCRIPTION: string;
+    /** @default "Check your email for the reset link" */
+    FORGOT_PASSWORD_EMAIL: string;
+    /** @default "Reset Password" */
+    RESET_PASSWORD: string;
+    /** @default "Save new password" */
+    RESET_PASSWORD_ACTION: string;
+    /** @default "Password reset successfully" */
+    RESET_PASSWORD_SUCCESS: string;
+    /** @default "Confirm new password" */
+    CONFIRM_NEW_PASSWORD: string;
+    /** @default "Set Password" */
+    SET_PASSWORD: string;
+    /** @default "Click the button to receive an email to set your password" */
+    SET_PASSWORD_DESCRIPTION: string;
+    /** @default "Check your email" */
+    CHECK_YOUR_EMAIL: string;
+    /** @default "Resend in {{seconds}}s" */
+    RESEND_IN: string;
+    /** @default "Email Verification" */
+    EMAIL_VERIFICATION: string;
+    /** @default "Verify your email address" */
+    EMAIL_VERIFICATION_DESCRIPTION: string;
+    /** @default "Email verified successfully" */
+    EMAIL_VERIFICATION_SUCCESS: string;
+    /** @default "Verifying your email..." */
+    EMAIL_VERIFICATION_CHECKING: string;
+    /** @default "Resend verification email" */
+    RESEND_VERIFICATION_EMAIL: string;
+    /** @default "Verification email sent" */
+    VERIFICATION_EMAIL_SENT: string;
+    /** @default "Email Code Verification" */
+    EMAIL_OTP: string;
+    /** @default "Enter your email to receive a verification code" */
+    EMAIL_OTP_DESCRIPTION: string;
+    /** @default "We sent a code to" */
+    EMAIL_OTP_SENT: string;
+    /** @default "Enter the 6-digit code" */
+    ENTER_VERIFICATION_CODE: string;
+    /** @default "Recover Account" */
+    RECOVER_ACCOUNT: string;
+    /** @default "Recover access to your account" */
+    RECOVER_ACCOUNT_DESCRIPTION: string;
+    /** @default "Select recovery method" */
+    SELECT_RECOVERY_METHOD: string;
+    /** @default "Reset via email link" */
+    RESET_VIA_EMAIL: string;
+    /** @default "Verify with email code" */
+    VERIFY_WITH_CODE: string;
+    /** @default "Verify via phone" */
+    VERIFY_VIA_PHONE: string;
+    /** @default "Step {{current}} of {{total}}" */
+    STEP_OF: string;
+    /** @default "Current Session" */
+    CURRENT_SESSION: string;
+    /** @default "Current device" */
+    CURRENT_DEVICE: string;
+    /** @default "Sessions" */
+    SESSIONS: string;
+    /** @default "Manage your active sessions" */
+    SESSIONS_DESCRIPTION: string;
+    /** @default "Trust" */
+    TRUST_DEVICE: string;
+    /** @default "Untrust" */
+    UNTRUST_DEVICE: string;
+    /** @default "Loading devices..." */
+    LOADING_DEVICES: string;
+    /** @default "No devices found" */
+    NO_DEVICES: string;
+    /** @default "Last used:" */
+    LAST_USED: string;
+    /** @default "IP:" */
+    IP_LABEL: string;
+    /** @default "Security" */
+    SECURITY: string;
+    /** @default "Session not fresh. Please sign in again." */
+    SESSION_NOT_FRESH: string;
+    /** @default "Login Activity" */
+    LOGIN_ACTIVITY: string;
+    /** @default "Recent login attempts" */
+    LOGIN_ACTIVITY_DESCRIPTION: string;
+    /** @default "Low" */
+    RISK_LOW: string;
+    /** @default "Medium" */
+    RISK_MEDIUM: string;
+    /** @default "High" */
+    RISK_HIGH: string;
+    /** @default "This was me" */
+    MARK_RECOGNIZED: string;
+    /** @default "Not me" */
+    REPORT_SUSPICIOUS: string;
+    /** @default "Loading activity..." */
+    LOADING_ACTIVITY: string;
+    /** @default "No login activity found" */
+    NO_ACTIVITY: string;
+    /** @default "Accounts" */
+    ACCOUNTS: string;
+    /** @default "Manage signed in accounts" */
+    ACCOUNTS_DESCRIPTION: string;
+    /** @default "Add account" */
+    ADD_ACCOUNT: string;
+    /** @default "Switch Account" */
+    SWITCH_ACCOUNT: string;
+    /** @default "Select account" */
+    SELECT_ACCOUNT: string;
+    /** @default "Personal Account" */
+    PERSONAL_ACCOUNT: string;
+    /** @default "Sign out" */
+    SIGN_OUT: string;
+    /** @default "Organization" */
+    ORGANIZATION: string;
+    /** @default "Organizations" */
+    ORGANIZATIONS: string;
+    /** @default "Manage your organizations" */
+    ORGANIZATIONS_DESCRIPTION: string;
+    /** @default "Select organization" */
+    SELECT_ORGANIZATION: string;
+    /** @default "Create organization" */
+    CREATE_ORGANIZATION: string;
+    /** @default "Name" */
+    ORGANIZATION_NAME: string;
+    /** @default "Acme Inc." */
+    ORGANIZATION_NAME_PLACEHOLDER: string;
+    /** @default "Leave Organization" */
+    LEAVE_ORGANIZATION: string;
+    /** @default "Delete Organization" */
+    DELETE_ORGANIZATION: string;
+    /** @default "Members" */
+    MEMBERS: string;
+    /** @default "Invite Member" */
+    INVITE_MEMBER: string;
+    /** @default "Remove Member" */
+    REMOVE_MEMBER: string;
+    /** @default "Role" */
+    ROLE: string;
+    /** @default "Admin" */
+    ADMIN: string;
+    /** @default "Member" */
+    MEMBER: string;
+    /** @default "Owner" */
+    OWNER: string;
+    /** @default "Settings" */
+    SETTINGS: string;
+    /** @default "Account" */
+    ACCOUNT: string;
+    /** @default "Avatar" */
+    AVATAR: string;
+    /** @default "Click avatar to upload a custom one" */
+    AVATAR_DESCRIPTION: string;
+    /** @default "Delete Avatar" */
+    DELETE_AVATAR: string;
+    /** @default "Upload Avatar" */
+    UPLOAD_AVATAR: string;
+    /** @default "Email" */
+    EMAIL: string;
+    /** @default "Name" */
+    NAME: string;
+    /** @default "Two-Factor" */
+    TWO_FACTOR: string;
+    /** @default "Two-Factor Authentication" */
+    TWO_FACTOR_PROMPT: string;
+    /** @default "Enter your one-time password" */
+    TWO_FACTOR_DESCRIPTION: string;
+    /** @default "Verify code" */
+    TWO_FACTOR_ACTION: string;
+    /** @default "Two-factor authentication has been enabled" */
+    TWO_FACTOR_ENABLED: string;
+    /** @default "Two-factor authentication has been disabled" */
+    TWO_FACTOR_DISABLED: string;
+    /** @default "Enable Two-Factor" */
+    ENABLE_TWO_FACTOR: string;
+    /** @default "Disable Two-Factor" */
+    DISABLE_TWO_FACTOR: string;
+    /** @default "Backup Codes" */
+    BACKUP_CODES: string;
+    /** @default "Save these codes in a secure place" */
+    BACKUP_CODES_DESCRIPTION: string;
+    /** @default "Enter your 6-digit code" */
+    ENTER_TOTP_CODE: string;
+    /** @default "Use backup code" */
+    USE_BACKUP_CODE: string;
+    /** @default "Use authenticator" */
+    USE_AUTHENTICATOR: string;
+    /** @default "Enter backup code" */
+    BACKUP_CODE_PLACEHOLDER: string;
+    /** @default "Passwords do not match" */
+    PASSWORDS_DO_NOT_MATCH: string;
+    /** @default "Password is required" */
+    PASSWORD_REQUIRED: string;
+    /** @default "Email address is required" */
+    EMAIL_REQUIRED: string;
+    /** @default "is required" */
+    IS_REQUIRED: string;
+    /** @default "is invalid" */
+    IS_INVALID: string;
+};
+type AuthLocalization = Partial<typeof authLocalization>;
+
+declare const AUTH_ERROR_CODES: {
+    INVALID_CREDENTIALS: string;
+    EMAIL_NOT_VERIFIED: string;
+    TWO_FACTOR_REQUIRED: string;
+    INVALID_PHONE_NUMBER: string;
+    OTP_EXPIRED: string;
+    OTP_INVALID: string;
+    OTP_MAX_ATTEMPTS: string;
+    PHONE_NUMBER_IN_USE: string;
+    FRAUD_DETECTED: string;
+    USERNAME_TAKEN: string;
+    USERNAME_INVALID: string;
+    USERNAME_RESERVED: string;
+    DEVICE_NOT_FOUND: string;
+    LOGIN_EVENT_NOT_FOUND: string;
+    REAUTH_REQUIRED: string;
+    MAX_SESSIONS_EXCEEDED: string;
+    CAPTCHA_REQUIRED: string;
+    CAPTCHA_INVALID: string;
+    PASSWORD_BREACHED: string;
+    SESSION_EXPIRED: string;
+    TOKEN_EXPIRED: string;
+    INVALID_TOKEN: string;
+    UNAUTHORIZED_ROLE: string;
+    ORGANIZATION_NOT_FOUND: string;
+    PERMISSION_DENIED: string;
+    RATE_LIMITED: string;
+    NETWORK_ERROR: string;
+    TIMEOUT: string;
+    USER_NOT_FOUND: string;
+    USER_ALREADY_EXISTS: string;
+    INVALID_EMAIL: string;
+    WEAK_PASSWORD: string;
+    ORG_LIMIT_EXCEEDED: string;
+    MEMBER_LIMIT_EXCEEDED: string;
+    KEY_NOT_FOUND: string;
+    KEY_REVOKED: string;
+    KEY_EXPIRED: string;
+};
+
+/**
+ * Gets a localized error message from an error object.
+ *
+ * When `localizeErrors` is true, looks up the error code directly
+ * in the localization dictionary (error codes are localization keys).
+ *
+ * Fallback chain:
+ * 1. localization[error.code] (if AuthError and localizeErrors)
+ * 2. error.message
+ * 3. localization.REQUEST_FAILED
+ * 4. "Request failed"
+ */
+declare function getLocalizedError(error: unknown, localization: AuthLocalization, localizeErrors: boolean): string;
 
 interface AuthProviderProps {
     apiKey?: string;
@@ -17,6 +466,8 @@ interface AuthProviderProps {
     initialToken?: string;
     initialUser?: User;
     storage?: ITokenStorage;
+    localization?: AuthLocalization;
+    localizeErrors?: boolean;
 }
 interface AuthContextValue {
     client: AuthClient;
@@ -32,7 +483,12 @@ interface AuthContextValue {
 }
 
 declare const AuthContext: react.Context<AuthContextValue | null>;
-declare function AuthProvider({ apiKey, baseUrl, autoRefreshToken, refreshThreshold, timeout, collectDeviceSignals, onSessionExpired, onTokenRefreshed, onNewDeviceAlert, children, initialUser, storage, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
+interface LocalizationContextValue {
+    overrides: AuthLocalization | null;
+    localizeErrors: boolean;
+}
+declare const LocalizationContext: react.Context<LocalizationContextValue>;
+declare function AuthProvider({ apiKey, baseUrl, autoRefreshToken, refreshThreshold, timeout, collectDeviceSignals, onSessionExpired, onTokenRefreshed, onNewDeviceAlert, children, initialUser, storage, localization, localizeErrors, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
 
 declare function useApiKeys(): {
     apiKeys: ApiKey[];
@@ -53,28 +509,38 @@ declare function useAuth(): {
     isAuthenticated: boolean;
     isLoading: boolean;
     error: _atzentis_auth_sdk.AuthError | null;
-    login: (credentials: LoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
-    loginWithUsername: (credentials: UsernameLoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
-    signup: (data: SignupData) => Promise<_atzentis_auth_sdk.SignupResponse>;
-    logout: () => Promise<void>;
-    logoutAllDevices: () => Promise<void>;
-    getOAuthUrl: (config: GetOAuthUrlRequest) => string;
-    verifyOAuthCode: (request: VerifyOAuthCodeRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
-    sendMagicLink: (request: SendMagicLinkRequest) => Promise<void>;
-    verifyMagicLink: (request: VerifyMagicLinkRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
-    isUsernameAvailable: (username: string) => Promise<boolean>;
+    clearError: () => void;
     getAccessToken: () => Promise<string | null>;
-    refreshToken: () => Promise<_atzentis_auth_sdk.RefreshTokenResponse>;
     getAuthHeader: () => Promise<{
         Authorization: string;
     } | {
         Authorization?: undefined;
     }>;
-    clearError: () => void;
+    getOAuthUrl: (config: GetOAuthUrlRequest) => string;
+    isUsernameAvailable: (username: string) => Promise<boolean>;
+    login: (credentials: LoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    loginWithUsername: (credentials: UsernameLoginCredentials) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    logout: () => Promise<void>;
+    logoutAllDevices: () => Promise<void>;
+    refreshToken: () => Promise<_atzentis_auth_sdk.RefreshTokenResponse>;
+    requestPasswordReset: (request: RequestPasswordResetRequest) => Promise<void>;
+    resetPassword: (request: ResetPasswordRequest) => Promise<_atzentis_auth_sdk.ResetPasswordResponse>;
+    sendMagicLink: (request: SendMagicLinkRequest) => Promise<void>;
+    sendVerificationEmail: (request: SendVerificationEmailRequest) => Promise<void>;
+    signup: (data: SignupData) => Promise<_atzentis_auth_sdk.SignupResponse>;
+    verifyEmail: (request: VerifyEmailRequest) => Promise<_atzentis_auth_sdk.VerifyEmailResponse>;
+    verifyMagicLink: (request: VerifyMagicLinkRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
+    verifyOAuthCode: (request: VerifyOAuthCodeRequest) => Promise<_atzentis_auth_sdk.LoginResponse>;
 };
 
 declare function useAuthContext(): AuthContextValue;
 
+interface UseAuthLocalizationResult {
+    localization: Required<AuthLocalization>;
+    localizeErrors: boolean;
+}
+declare function useAuthLocalization(): UseAuthLocalizationResult;
+
 declare function useDevices(): {
     devices: Device[];
     currentDevice: Device | null;
@@ -172,4 +638,469 @@ declare function useUser(): {
     removePhoneNumber: (password: string) => Promise<void>;
 };
 
-export { AuthContext, type AuthContextValue, AuthProvider, type AuthProviderProps, useApiKeys, useAuth, useAuthContext, useDevices, useLoginActivity, useOrganizations, usePhone, useSession, useSessions, useUser };
+type OAuthConfig = {
+    oauthProviders: OAuthProvider[];
+    oauthRedirectUri: string;
+};
+interface LoginFormBaseProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    enablePhone?: boolean;
+    enableForgotPassword?: boolean;
+    onForgotPasswordClick?: () => void;
+    className?: string;
+}
+type LoginFormProps = LoginFormBaseProps & (OAuthConfig | {
+    oauthProviders?: never;
+});
+interface SignupFormProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    showUsernameField?: boolean;
+    showPhoneField?: boolean;
+    organizationName?: string;
+    acceptTermsRequired?: boolean;
+    onLoginClick?: () => void;
+    className?: string;
+}
+interface PhoneLoginFormProps {
+    onSuccess: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    allowedCountryCodes?: string[];
+    showPasswordFallback?: boolean;
+    autoFocusOTP?: boolean;
+    className?: string;
+}
+interface OAuthButtonProps {
+    provider: OAuthProvider;
+    redirectUri: string;
+    state?: string;
+    variant?: "filled" | "outline";
+    size?: "sm" | "md" | "lg";
+    className?: string;
+}
+interface MagicLinkFormProps {
+    redirectUrl: string;
+    onSuccess?: () => void;
+    onError?: (error: AuthError) => void;
+    className?: string;
+}
+interface DeviceListProps {
+    showTrustToggle?: boolean;
+    showRemoveAction?: boolean;
+    onDeviceTrusted?: (device: Device) => void;
+    onDeviceUntrusted?: (device: Device) => void;
+    onDeviceRemoved?: (device: Device) => void;
+    renderDeviceIcon?: (device: Device) => ReactNode;
+    className?: string;
+}
+interface LoginActivityFeedProps {
+    limit?: number;
+    showRiskBadge?: boolean;
+    showReportActions?: boolean;
+    filterByStatus?: "success" | "failed" | "blocked";
+    onSuspiciousReported?: (event: LoginEvent) => void;
+    className?: string;
+}
+interface AccountSwitcherProps {
+    showAddAccount?: boolean;
+    onSwitch?: (user: User) => void;
+    onAddAccount?: () => void;
+    maxAccounts?: number;
+    className?: string;
+}
+interface SessionGuardProps {
+    children: ReactNode;
+    fallback: ReactNode;
+    loadingFallback?: ReactNode;
+    freshRequired?: boolean;
+    freshThreshold?: number;
+    requiredRole?: string;
+    className?: string;
+}
+interface UserMenuProps {
+    showOrganization?: boolean;
+    menuItems?: Array<{
+        label: string;
+        onClick: () => void;
+    }>;
+    className?: string;
+}
+interface OrganizationMenuProps {
+    showCreateNew?: boolean;
+    currentOrgId?: string;
+    onSwitch?: (org: Organization) => void;
+    onCreateNew?: () => void;
+    className?: string;
+}
+interface ForgotPasswordFormProps {
+    redirectUrl: string;
+    onSuccess?: () => void;
+    onError?: (error: AuthError) => void;
+    onBackToLogin?: () => void;
+    resendCooldown?: number;
+    className?: string;
+}
+interface TwoFactorFormProps {
+    onVerify: (code: string) => void | Promise<void>;
+    onError?: (error: AuthError) => void;
+    autoSubmit?: boolean;
+    isLoading?: boolean;
+    className?: string;
+}
+interface EmailVerificationFormProps {
+    token?: string;
+    email?: string;
+    redirectUrl: string;
+    onSuccess?: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    resendCooldown?: number;
+    className?: string;
+}
+interface EmailOTPFormProps {
+    redirectUrl: string;
+    onSuccess?: (user: User) => void;
+    onError?: (error: AuthError) => void;
+    resendCooldown?: number;
+    autoSubmit?: boolean;
+    className?: string;
+}
+interface ResetPasswordFormProps {
+    token: string;
+    onSuccess?: () => void;
+    onError?: (error: AuthError) => void;
+    className?: string;
+}
+interface RecoverAccountFormProps {
+    redirectUrl: string;
+    enablePhone?: boolean;
+    onSuccess?: () => void;
+    onError?: (error: AuthError) => void;
+    resendCooldown?: number;
+    className?: string;
+}
+interface LoadingBoundaryProps {
+    children: ReactNode;
+    spinner?: ReactNode;
+    delay?: number;
+    className?: string;
+}
+type AuthViewPath = "/sign-in" | "/sign-up" | "/forgot-password" | "/reset-password" | "/verify-email" | "/email-otp" | "/recover-account" | "/two-factor";
+interface AuthViewProps {
+    pathname: string;
+    paths?: Partial<Record<AuthViewPath, string>>;
+    fallback?: ReactNode;
+    searchParams?: Record<string, string | undefined>;
+    getSearchParam?: (key: string) => string | undefined;
+    onSuccess?: (userOrVoid?: User) => void;
+    onError?: (error: AuthError) => void;
+    enablePhone?: boolean;
+    oauthProviders?: OAuthProvider[];
+    oauthRedirectUri?: string;
+    redirectUrl?: string;
+    className?: string;
+}
+
+declare function AccountSwitcher({ showAddAccount, onSwitch, onAddAccount, maxAccounts, className, }: AccountSwitcherProps): react_jsx_runtime.JSX.Element;
+
+declare function SessionGuard({ children, fallback, loadingFallback, freshRequired, freshThreshold, requiredRole, className, }: SessionGuardProps): react_jsx_runtime.JSX.Element;
+
+/**
+ * AuthView — Pathname-based router for auth flows.
+ * Renders the appropriate auth form component based on the pathname prop.
+ *
+ * @example
+ * // Next.js App Router:
+ * import { AuthView } from "@atzentis/auth-react";
+ *
+ * export default function AuthPage({ params, searchParams }) {
+ *   const pathname = `/${params.slug?.join("/") || ""}`;
+ *   return <AuthView pathname={pathname} searchParams={searchParams} />;
+ * }
+ *
+ * @example
+ * // Custom path mapping:
+ * <AuthView
+ *   pathname="/login"
+ *   paths={{ "/sign-in": "/login", "/sign-up": "/register" }}
+ *   onSuccess={(user) => router.push("/dashboard")}
+ * />
+ */
+declare function AuthView({ pathname, paths, fallback, searchParams, getSearchParam, onSuccess, onError, enablePhone, oauthProviders, oauthRedirectUri, redirectUrl, className, }: AuthViewProps): react_jsx_runtime.JSX.Element;
+
+/**
+ * Default path mapping for AuthView component.
+ * Maps logical auth flow paths to actual URL paths.
+ *
+ * @example
+ * // Use in Next.js App Router:
+ * <AuthView pathname={pathname} paths={authViewPaths} />
+ *
+ * // Override specific paths:
+ * <AuthView
+ *   pathname={pathname}
+ *   paths={{ ...authViewPaths, "/sign-in": "/login" }}
+ * />
+ */
+declare const authViewPaths: Record<AuthViewPath, string>;
+
+declare function EmailOTPForm({ redirectUrl, onSuccess, onError, resendCooldown, autoSubmit, className, }: EmailOTPFormProps): react_jsx_runtime.JSX.Element;
+
+declare function EmailVerificationForm({ token, email, redirectUrl, onSuccess, onError, resendCooldown, className, }: EmailVerificationFormProps): react_jsx_runtime.JSX.Element;
+
+declare function ForgotPasswordForm({ redirectUrl, onSuccess, onError, onBackToLogin, resendCooldown, className, }: ForgotPasswordFormProps): react_jsx_runtime.JSX.Element;
+
+declare function LoginForm({ onSuccess, onError, enablePhone, enableForgotPassword, onForgotPasswordClick, className, ...oauthProps }: LoginFormProps): react_jsx_runtime.JSX.Element;
+
+declare function MagicLinkForm({ redirectUrl, onSuccess, onError, className }: MagicLinkFormProps): react_jsx_runtime.JSX.Element;
+
+declare function PhoneLoginForm({ onSuccess, onError, allowedCountryCodes, showPasswordFallback, className, }: PhoneLoginFormProps): react_jsx_runtime.JSX.Element;
+
+declare function RecoverAccountForm({ redirectUrl, enablePhone, onSuccess, onError, resendCooldown, className, }: RecoverAccountFormProps): react_jsx_runtime.JSX.Element | null;
+
+declare function ResetPasswordForm({ token, onSuccess, onError, className, }: ResetPasswordFormProps): react_jsx_runtime.JSX.Element;
+
+declare function SignupForm({ onSuccess, onError, showUsernameField, showPhoneField, organizationName, acceptTermsRequired, onLoginClick, className, }: SignupFormProps): react_jsx_runtime.JSX.Element;
+
+declare function TwoFactorForm({ onVerify, onError, autoSubmit, isLoading, className, }: TwoFactorFormProps): react_jsx_runtime.JSX.Element;
+
+declare function OAuthButton({ provider, redirectUri, state, variant, size, className, }: OAuthButtonProps): react_jsx_runtime.JSX.Element;
+
+declare function DeviceList({ showTrustToggle, showRemoveAction, onDeviceTrusted, onDeviceUntrusted, onDeviceRemoved, renderDeviceIcon, className, }: DeviceListProps): react_jsx_runtime.JSX.Element;
+
+declare function LoadingBoundary({ children, spinner, delay, className, }: LoadingBoundaryProps): react_jsx_runtime.JSX.Element | null;
+
+declare function isEmail(value: string): boolean;
+declare function maskEmail(email: string): string;
+
+declare function LoginActivityFeed({ limit, showRiskBadge, showReportActions, filterByStatus, onSuspiciousReported, className, }: LoginActivityFeedProps): react_jsx_runtime.JSX.Element;
+
+declare function OrganizationMenu({ showCreateNew, currentOrgId, onSwitch, onCreateNew, className, }: OrganizationMenuProps): react_jsx_runtime.JSX.Element;
+
+declare function UserMenu({ showOrganization, menuItems, className }: UserMenuProps): react_jsx_runtime.JSX.Element | null;
+
+declare const credentialLoginSchema: z.ZodObject<{
+    identity: z.ZodString;
+    password: z.ZodString;
+    captchaToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    identity: string;
+    captchaToken?: string | undefined;
+}, {
+    password: string;
+    identity: string;
+    captchaToken?: string | undefined;
+}>;
+type CredentialLoginFormData = z.infer<typeof credentialLoginSchema>;
+declare const phoneLoginSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhoneLoginFormData = z.infer<typeof phoneLoginSchema>;
+declare const otpVerifySchema$1: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type OtpVerifyFormData$1 = z.infer<typeof otpVerifySchema$1>;
+
+declare const emailOtpEmailSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+type EmailOtpEmailFormData = z.infer<typeof emailOtpEmailSchema>;
+declare const emailOtpCodeSchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type EmailOtpCodeFormData = z.infer<typeof emailOtpCodeSchema>;
+
+declare const forgotPasswordSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+type ForgotPasswordFormData = z.infer<typeof forgotPasswordSchema>;
+
+declare const magicLinkSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+type MagicLinkFormData = z.infer<typeof magicLinkSchema>;
+
+declare const phoneNumberSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhoneNumberFormData = z.infer<typeof phoneNumberSchema>;
+declare const otpVerifySchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type OtpVerifyFormData = z.infer<typeof otpVerifySchema>;
+declare const phonePasswordSchema: z.ZodObject<{
+    countryCode: z.ZodString;
+    phoneNumber: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    countryCode: string;
+    phoneNumber: string;
+}, {
+    password: string;
+    countryCode: string;
+    phoneNumber: string;
+}>;
+type PhonePasswordFormData = z.infer<typeof phonePasswordSchema>;
+
+declare const recoverEmailSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+type RecoverEmailFormData = z.infer<typeof recoverEmailSchema>;
+declare const recoverCodeSchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type RecoverCodeFormData = z.infer<typeof recoverCodeSchema>;
+declare const recoverNewPasswordSchema: z.ZodEffects<z.ZodObject<{
+    newPassword: z.ZodString;
+    confirmPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    newPassword: string;
+    confirmPassword: string;
+}, {
+    newPassword: string;
+    confirmPassword: string;
+}>, {
+    newPassword: string;
+    confirmPassword: string;
+}, {
+    newPassword: string;
+    confirmPassword: string;
+}>;
+type RecoverNewPasswordFormData = z.infer<typeof recoverNewPasswordSchema>;
+declare const recoverPhoneSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    phoneNumber: string;
+}, {
+    phoneNumber: string;
+}>;
+type RecoverPhoneFormData = z.infer<typeof recoverPhoneSchema>;
+type RecoveryMethod = "email_link" | "email_code" | "phone_otp";
+
+declare const resetPasswordSchema: z.ZodEffects<z.ZodObject<{
+    newPassword: z.ZodString;
+    confirmPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    newPassword: string;
+    confirmPassword: string;
+}, {
+    newPassword: string;
+    confirmPassword: string;
+}>, {
+    newPassword: string;
+    confirmPassword: string;
+}, {
+    newPassword: string;
+    confirmPassword: string;
+}>;
+type ResetPasswordFormData = z.infer<typeof resetPasswordSchema>;
+
+declare const signupSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    name: z.ZodString;
+    username: z.ZodOptional<z.ZodString>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    organizationName: z.ZodOptional<z.ZodString>;
+    acceptTerms: z.ZodBoolean;
+    captchaToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    name: string;
+    password: string;
+    acceptTerms: boolean;
+    username?: string | undefined;
+    captchaToken?: string | undefined;
+    phoneNumber?: string | undefined;
+    organizationName?: string | undefined;
+}, {
+    email: string;
+    name: string;
+    password: string;
+    acceptTerms: boolean;
+    username?: string | undefined;
+    captchaToken?: string | undefined;
+    phoneNumber?: string | undefined;
+    organizationName?: string | undefined;
+}>;
+type SignupFormData = z.infer<typeof signupSchema>;
+
+declare const totpSchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+type TotpFormData = z.infer<typeof totpSchema>;
+declare const backupCodeSchema: z.ZodObject<{
+    backupCode: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    backupCode: string;
+}, {
+    backupCode: string;
+}>;
+type BackupCodeFormData = z.infer<typeof backupCodeSchema>;
+
+declare function getInitials(name: string): string;
+
+type RiskLevel = "low" | "medium" | "high";
+declare function getRiskLevel(score: number): RiskLevel;
+declare const RISK_COLORS: Record<RiskLevel, string>;
+
+/**
+ * Safely converts an unknown caught value to AuthError.
+ * If the value is already an AuthError, returns it directly.
+ * Otherwise wraps the message in a new AuthError.
+ */
+declare function toAuthError(error: unknown): AuthError;
+
+export { AUTH_ERROR_CODES, AccountSwitcher, type AccountSwitcherProps, AuthContext, type AuthContextValue, type AuthLocalization, AuthProvider, type AuthProviderProps, AuthView, type AuthViewPath, type AuthViewProps, type BackupCodeFormData, type CredentialLoginFormData, DeviceList, type DeviceListProps, EmailOTPForm, type EmailOTPFormProps, type EmailOtpCodeFormData, type EmailOtpEmailFormData, EmailVerificationForm, type EmailVerificationFormProps, ForgotPasswordForm, type ForgotPasswordFormData, type ForgotPasswordFormProps, LoadingBoundary, type LoadingBoundaryProps, LocalizationContext, type LocalizationContextValue, LoginActivityFeed, type LoginActivityFeedProps, LoginForm, type LoginFormProps, MagicLinkForm, type MagicLinkFormData, type MagicLinkFormProps, OAuthButton, type OAuthButtonProps, OrganizationMenu, type OrganizationMenuProps, type OtpVerifyFormData$1 as OtpVerifyFormData, PhoneLoginForm, type PhoneLoginFormData, type PhoneLoginFormProps, type PhoneNumberFormData, type OtpVerifyFormData as PhoneOtpVerifyFormData, type PhonePasswordFormData, RISK_COLORS, RecoverAccountForm, type RecoverAccountFormProps, type RecoverCodeFormData, type RecoverEmailFormData, type RecoverNewPasswordFormData, type RecoverPhoneFormData, type RecoveryMethod, ResetPasswordForm, type ResetPasswordFormData, type ResetPasswordFormProps, type RiskLevel, SessionGuard, type SessionGuardProps, SignupForm, type SignupFormData, type SignupFormProps, type TotpFormData, TwoFactorForm, type TwoFactorFormProps, UserMenu, type UserMenuProps, authLocalization, authViewPaths, backupCodeSchema, credentialLoginSchema, emailOtpCodeSchema, emailOtpEmailSchema, forgotPasswordSchema, getInitials, getLocalizedError, getRiskLevel, isEmail, magicLinkSchema, maskEmail, otpVerifySchema$1 as otpVerifySchema, phoneLoginSchema, phoneNumberSchema, otpVerifySchema as phoneOtpVerifySchema, phonePasswordSchema, recoverCodeSchema, recoverEmailSchema, recoverNewPasswordSchema, recoverPhoneSchema, resetPasswordSchema, signupSchema, toAuthError, totpSchema, useApiKeys, useAuth, useAuthContext, useAuthLocalization, useDevices, useLoginActivity, useOrganizations, usePhone, useSession, useSessions, useUser };