@clerk/electron 0.0.1-snapshot.v20260617204522

package/dist/esm/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/storage/index.ts"],"names":["storage"],"mappings":";;;;AAgCA,IAAM,gBAAA,GAAmB,MAAA;AAKzB,IAAM,UAAA,GAAa,MAAA;AAiBnB,IAAM,UAAA,GAAqB;AAAA,EACzB,OAAA,EAAS,CAAA,KAAA,KAAS,OAAA,CAAQ,OAAA,CAAQ,WAAA,CAAY,cAAc,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA;AAAA,EACrF,SAAS,CAAA,OAAA,KACP,OAAA,CAAQ,OAAA,CAAQ,EAAE,OAAO,WAAA,CAAY,aAAA,CAAc,MAAA,CAAO,IAAA,CAAK,SAAS,QAAQ,CAAC,CAAA,EAAG,eAAA,EAAiB,OAAO;AAChH,CAAA;AAEA,SAAS,oBAAoBA,QAAAA,EAA+E;AAC1G,EAAA,MAAM,SAAA,GAAYA,QAAAA;AAElB,EAAA,OACE,OAAO,SAAA,CAAU,kBAAA,KAAuB,UAAA,IACxC,OAAO,UAAU,kBAAA,KAAuB,UAAA,IACxC,OAAO,SAAA,CAAU,0BAAA,KAA+B,UAAA;AAEpD;AAEA,SAAS,kBAAkBA,QAAAA,EAAmC;AAC5D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,OAAM,KAAA,KAAA,CAAU,MAAMA,SAAQ,kBAAA,CAAmB,KAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA;AAAA,IACnF,OAAA,EAAS,OAAM,OAAA,KAAW;AACxB,MAAA,MAAM,EAAE,MAAA,EAAQ,eAAA,EAAgB,GAAI,MAAMA,QAAAA,CAAQ,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAC,CAAA;AACnG,MAAA,OAAO,EAAE,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC1C;AAAA,GACF;AACF;AAKA,eAAe,aAAA,GAAwC;AAErD,EAAA,IAAI,mBAAA,CAAoB,WAAW,CAAA,EAAG;AACpC,IAAA,IAAI;AACF,MAAA,IAAI,MAAM,WAAA,CAAY,0BAAA,EAA2B,EAAG;AAClD,QAAA,OAAO,kBAAkB,WAAW,CAAA;AAAA,MACtC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,WAAA,CAAY,qBAAA,KAA0B,UAAA,IAAc,WAAA,CAAY,uBAAsB,EAAG;AAClG,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AAuBO,SAAS,OAAA,CAAQ,OAAA,GAA0B,EAAC,EAAiB;AA5HpE,EAAA,IAAA,EAAA;AA6HE,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAA8B;AAAA,IAC9C,IAAA,EAAA,CAAM,EAAA,GAAA,OAAA,CAAQ,IAAA,KAAR,IAAA,GAAA,EAAA,GAAgB,cAAA;AAAA,IACtB,GAAI,QAAQ,IAAA,GAAO,EAAE,KAAK,OAAA,CAAQ,IAAA,KAAS;AAAC,GAC7C,CAAA;AAED,EAAA,IAAI,YAAA,GAA8B,IAAA;AAClC,EAAA,IAAI,SAAA,GAA2C,IAAA;AAC/C,EAAA,MAAM,YAAY,MAA8B;AAC9C,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAO,OAAA,CAAQ,QAAQ,YAAY,CAAA;AAAA,IACrC;AACA,IAAA,SAAA,IAAA,IAAA,GAAA,SAAA,GAAA,SAAA,GAAc,aAAA,EAAc,CAAE,IAAA,CAAK,CAAA,QAAA,KAAY;AAC7C,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,YAAA,GAAe,QAAA;AAAA,MACjB;AACA,MAAA,OAAO,QAAA;AAAA,IACT,CAAC,CAAA;AACD,IAAA,OAAO,SAAA;AAAA,EACT,CAAA;AAEA,EAAA,IAAI,MAAA,GAAS,KAAA;AACb,EAAA,MAAM,QAAA,GAAW,CAAC,OAAA,KAAoB;AACpC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA;AAAA,IACF;AACA,IAAA,MAAA,GAAS,IAAA;AACT,IAAA,OAAA,CAAQ,KAAK,OAAO,CAAA;AAAA,EACtB,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,QAAQ,GAAA,EAAK;AACjB,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAE5B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,IAAI,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA,EAAG;AACjC,QAAA,OAAO,MAAA,CAAO,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA;AAAA,MACvC;AAEA,MAAA,IAAI,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA,EAAG;AACvC,QAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAG/B,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,gBAAA,CAAiB,MAAM,CAAA;AAEpD,QAAA,IAAI;AACF,UAAA,MAAM,EAAE,KAAA,EAAO,eAAA,KAAoB,MAAM,MAAA,CAAO,QAAQ,OAAO,CAAA;AAE/D,UAAA,IAAI,eAAA,EAAiB;AAEnB,YAAA,IAAI;AACF,cAAA,KAAA,CAAM,IAAI,GAAA,EAAK,gBAAA,GAAoB,MAAM,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAE,CAAA;AAAA,YACjE,CAAA,CAAA,MAAQ;AAAA,YAER;AAAA,UACF;AAEA,UAAA,OAAO,KAAA;AAAA,QACT,CAAA,CAAA,MAAQ;AAEN,UAAA,OAAO,IAAA;AAAA,QACT;AAAA,MACF;AAGA,MAAA,KAAA,CAAM,OAAO,GAAG,CAAA;AAChB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAM,OAAA,CAAQ,GAAA,EAAK,KAAA,EAAO;AACxB,MAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAE/B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,IAAI,QAAQ,mBAAA,EAAqB;AAC/B,UAAA,QAAA;AAAA,YACE;AAAA,WACF;AACA,UAAA,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,UAAA,GAAa,KAAK,CAAA;AAAA,QACnC,CAAA,MAAO;AACL,UAAA,QAAA;AAAA,YACE;AAAA,WACF;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,KAAA,CAAM,IAAI,GAAA,EAAK,gBAAA,GAAoB,MAAM,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAE,CAAA;AAAA,MACjE,CAAA,CAAA,MAAQ;AAEN,QAAA,QAAA,CAAS,mEAAmE,CAAA;AAAA,MAC9E;AAAA,IACF,CAAA;AAAA,IACA,WAAW,GAAA,EAAK;AACd,MAAA,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import { safeStorage } from 'electron';\nimport Store from 'electron-store';\n\nimport type { TokenStorage } from '../shared/types';\n\ntype StorageOptions = {\n  /**\n   * The name of the file (without extension) used to persist tokens.\n   *\n   * @default 'clerk-tokens'\n   */\n  name?: string;\n  /**\n   * The directory in which the token file is stored. Maps to `electron-store`'s `cwd` option.\n   * When omitted, the OS default user config directory is used.\n   */\n  path?: string;\n  /**\n   * When OS-level encryption is unavailable (e.g. a Linux machine without a keyring), tokens are\n   * not persisted by default, which signs the user out on the next app launch. Set this to `true`\n   * to instead persist tokens **unencrypted** in that scenario, keeping the user signed in across\n   * restarts at the cost of storing tokens in plaintext on disk.\n   *\n   * @default false\n   */\n  unencryptedFallback?: boolean;\n};\n\n/**\n * Marks a value that was encrypted via {@link safeStorage}; the remainder is base64 ciphertext.\n * values will be stored as: `enc:<encrypted value>`\n */\nconst ENCRYPTED_PREFIX = 'enc:';\n/**\n * Marks a value persisted unencrypted via the `unencryptedFallback` option.\n * values will be stored as: `raw:<value>`\n */\nconst RAW_PREFIX = 'raw:';\n\ntype Cipher = {\n  encrypt: (value: string) => Promise<string>;\n  /**\n   * Decrypts a base64 payload. `shouldReEncrypt` is `true` (async backend only) when the OS key\n   * has rotated and the payload should be re-encrypted with the new key.\n   */\n  decrypt: (payload: string) => Promise<{ value: string; shouldReEncrypt: boolean }>;\n};\n\ntype AsyncSafeStorage = {\n  encryptStringAsync: (plainText: string) => Promise<Buffer>;\n  decryptStringAsync: (encrypted: Buffer) => Promise<{ result: string; shouldReEncrypt: boolean }>;\n  isAsyncEncryptionAvailable: () => Promise<boolean>;\n};\n\nconst syncCipher: Cipher = {\n  encrypt: value => Promise.resolve(safeStorage.encryptString(value).toString('base64')),\n  decrypt: payload =>\n    Promise.resolve({ value: safeStorage.decryptString(Buffer.from(payload, 'base64')), shouldReEncrypt: false }),\n};\n\nfunction hasAsyncSafeStorage(storage: typeof safeStorage): storage is typeof safeStorage & AsyncSafeStorage {\n  const candidate = storage as Partial<AsyncSafeStorage>;\n\n  return (\n    typeof candidate.encryptStringAsync === 'function' &&\n    typeof candidate.decryptStringAsync === 'function' &&\n    typeof candidate.isAsyncEncryptionAvailable === 'function'\n  );\n}\n\nfunction createAsyncCipher(storage: AsyncSafeStorage): Cipher {\n  return {\n    encrypt: async value => (await storage.encryptStringAsync(value)).toString('base64'),\n    decrypt: async payload => {\n      const { result, shouldReEncrypt } = await storage.decryptStringAsync(Buffer.from(payload, 'base64'));\n      return { value: result, shouldReEncrypt };\n    },\n  };\n}\n\n/**\n * Resolves the crypto backend to use, or `null` when no OS encryption is currently available.\n */\nasync function resolveCipher(): Promise<Cipher | null> {\n  // Prefer the async API, but only when the full optional function surface exists.\n  if (hasAsyncSafeStorage(safeStorage)) {\n    try {\n      if (await safeStorage.isAsyncEncryptionAvailable()) {\n        return createAsyncCipher(safeStorage);\n      }\n    } catch {\n      /* fall through to the synchronous API */\n    }\n  }\n\n  // The synchronous API blocks the calling thread on the OS prompt during the first encrypt/decrypt,\n  if (typeof safeStorage.isEncryptionAvailable === 'function' && safeStorage.isEncryptionAvailable()) {\n    return syncCipher;\n  }\n\n  return null;\n}\n\n/**\n * Creates a secure {@link TokenStorage} adapter for the Electron main process.\n *\n * Tokens are persisted with `electron-store` and encrypted at rest using Electron's\n * {@link safeStorage} API, which is backed by the OS keystore (Keychain on macOS, DPAPI on\n * Windows, libsecret/kwallet on Linux). It uses Electron 42's async `safeStorage` API only when it\n * reports itself available (which generally requires a code-signed app) and otherwise falls back to\n * the synchronous API. Pass the result to `createClerkBridge({ storage: storage() })`.\n *\n * Behavior is secure by default: when OS encryption is unavailable the adapter does not persist\n * tokens (the user will be signed out on restart) unless {@link StorageOptions.unencryptedFallback}\n * is enabled. Undecryptable entries return `null`.\n *\n * @example\n * ```ts\n * import { createClerkBridge } from '@clerk/electron';\n * import { storage } from '@clerk/electron/storage';\n *\n * createClerkBridge({ storage: storage({ name: 'my-app-tokens' }) });\n * ```\n */\nexport function storage(options: StorageOptions = {}): TokenStorage {\n  const store = new Store<Record<string, string>>({\n    name: options.name ?? 'clerk-tokens',\n    ...(options.path ? { cwd: options.path } : {}),\n  });\n\n  let cachedCipher: Cipher | null = null;\n  let resolving: Promise<Cipher | null> | null = null;\n  const getCipher = (): Promise<Cipher | null> => {\n    if (cachedCipher) {\n      return Promise.resolve(cachedCipher);\n    }\n    resolving ??= resolveCipher().then(resolved => {\n      resolving = null;\n      if (resolved) {\n        cachedCipher = resolved;\n      }\n      return resolved;\n    });\n    return resolving;\n  };\n\n  let warned = false;\n  const warnOnce = (message: string) => {\n    if (warned) {\n      return;\n    }\n    warned = true;\n    console.warn(message);\n  };\n\n  return {\n    async getItem(key) {\n      const stored = store.get(key);\n\n      if (!stored) {\n        return null;\n      }\n\n      if (stored.startsWith(RAW_PREFIX)) {\n        return stored.slice(RAW_PREFIX.length);\n      }\n\n      if (stored.startsWith(ENCRYPTED_PREFIX)) {\n        const cipher = await getCipher();\n\n        // No usable OS encryption, preserve entry.\n        if (!cipher) {\n          return null;\n        }\n\n        const payload = stored.slice(ENCRYPTED_PREFIX.length);\n\n        try {\n          const { value, shouldReEncrypt } = await cipher.decrypt(payload);\n\n          if (shouldReEncrypt) {\n            // OS key has rotated, persist with new value\n            try {\n              store.set(key, ENCRYPTED_PREFIX + (await cipher.encrypt(value)));\n            } catch {\n              // keep the existing payload; it still decrypts for now\n            }\n          }\n\n          return value;\n        } catch {\n          // Decryption failed, preserve the entry, new write on next sign-in.\n          return null;\n        }\n      }\n\n      // Unknown or unrecognized format, drop the entry so we don't repeatedly fail on it.\n      store.delete(key);\n      return null;\n    },\n    async setItem(key, value) {\n      const cipher = await getCipher();\n\n      if (!cipher) {\n        if (options.unencryptedFallback) {\n          warnOnce(\n            'Clerk: OS encryption is unavailable; falling back to unencrypted storage. Session tokens are being stored unencrypted on local disk.',\n          );\n          store.set(key, RAW_PREFIX + value);\n        } else {\n          warnOnce(\n            'Clerk: OS encryption is unavailable and unencryptedFallback is not enabled, so tokens are not being persisted. The user will be signed out on the next launch. Pass `storage({ unencryptedFallback: true })` to persist unencrypted (less secure).',\n          );\n        }\n        return;\n      }\n\n      try {\n        store.set(key, ENCRYPTED_PREFIX + (await cipher.encrypt(value)));\n      } catch {\n        // Encryption is available but encryption failed\n        warnOnce('Clerk: failed to encrypt the session token; it was not persisted.');\n      }\n    },\n    removeItem(key) {\n      store.delete(key);\n    },\n  };\n}\n"]}

package/dist/types/index.d.ts

@@ -0,0 +1,4 @@
+export { createClerkBridge } from './main/create-clerk-bridge';
+export { setupPasskeysMain } from './main/passkey-handlers';
+export type { ClerkBridge, CreateClerkBridgeOptions, ExposeClerkBridgeOptions, TokenStorage } from './shared/types';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/types/main/create-clerk-bridge.d.ts

@@ -0,0 +1,10 @@
+import type { ClerkBridge, CreateClerkBridgeOptions } from '../shared/types';
+/**
+ * Creates the Clerk bridge for Electron's main process.
+ *
+ * The bridge owns Clerk's main-process IPC handlers, token persistence, and OAuth deep-link
+ * transport. Call this before creating renderer windows, and call the returned `cleanup` method
+ * when tearing down the app or test environment.
+ */
+export declare function createClerkBridge(options: CreateClerkBridgeOptions): ClerkBridge;
+//# sourceMappingURL=create-clerk-bridge.d.ts.map

package/dist/types/main/create-clerk-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-clerk-bridge.d.ts","sourceRoot":"","sources":["../../../src/main/create-clerk-bridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAmB7E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CAuChF"}

package/dist/types/main/ipc-handlers.d.ts

@@ -0,0 +1,3 @@
+import type { TokenStorage } from '../shared/types';
+export declare function setupTokenCacheIpcHandlers(storage: TokenStorage): () => void;
+//# sourceMappingURL=ipc-handlers.d.ts.map

package/dist/types/main/ipc-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-handlers.d.ts","sourceRoot":"","sources":["../../../src/main/ipc-handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,IAAI,CAkB5E"}

package/dist/types/main/oauth-transport.d.ts

@@ -0,0 +1,7 @@
+import type { RendererSchemeOptions } from '../shared/types';
+type OAuthTransportOptions = {
+    renderer: RendererSchemeOptions;
+};
+export declare function setupOAuthTransportIpcHandlers(options: OAuthTransportOptions): () => void;
+export {};
+//# sourceMappingURL=oauth-transport.d.ts.map

package/dist/types/main/oauth-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-transport.d.ts","sourceRoot":"","sources":["../../../src/main/oauth-transport.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAU7D,KAAK,qBAAqB,GAAG;IAC3B,QAAQ,EAAE,qBAAqB,CAAC;CACjC,CAAC;AA6BF,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAqFzF"}

package/dist/types/main/passkey-handlers.d.ts

@@ -0,0 +1,4 @@
+import type { SetupPasskeysMainReturn } from '../shared/types';
+/** Registers IPC handlers for native platform WebAuthn. */
+export declare function setupPasskeysMain(): SetupPasskeysMainReturn;
+//# sourceMappingURL=passkey-handlers.d.ts.map

package/dist/types/main/passkey-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-handlers.d.ts","sourceRoot":"","sources":["../../../src/main/passkey-handlers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAQV,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AA6FzB,2DAA2D;AAC3D,wBAAgB,iBAAiB,IAAI,uBAAuB,CAuC3D"}

package/dist/types/passkeys/index.d.ts

@@ -0,0 +1,56 @@
+import type { CredentialReturn, PublicKeyCredentialCreationOptionsWithoutExtensions, PublicKeyCredentialRequestOptionsWithoutExtensions, PublicKeyCredentialWithAuthenticatorAssertionResponse, PublicKeyCredentialWithAuthenticatorAttestationResponse } from '@clerk/shared/types';
+import type { PasskeyMode } from './renderer/strategy';
+export type { PasskeyMode, PasskeyPath, StrategyEnv } from './renderer/strategy';
+export type CreatePasskeysOptions = {
+    /**
+     * WebAuthn implementation to use:
+     * `auto` chooses renderer WebAuthn for valid HTTPS origins and native WebAuthn otherwise.
+     */
+    mode?: PasskeyMode;
+};
+export type PasskeySupport = {
+    create: (publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions) => Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAttestationResponse>>;
+    get: (args: {
+        publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions;
+    }) => Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAssertionResponse>>;
+    isSupported: () => boolean;
+    isAutoFillSupported: () => Promise<boolean>;
+    isPlatformAuthenticatorSupported: () => Promise<boolean>;
+};
+export type ClerkPasskeyHost = {
+    __internal_createPublicCredentials: PasskeySupport['create'] | undefined;
+    __internal_getPublicCredentials: PasskeySupport['get'] | undefined;
+    __internal_isWebAuthnSupported: PasskeySupport['isSupported'] | undefined;
+    __internal_isWebAuthnAutofillSupported: PasskeySupport['isAutoFillSupported'] | undefined;
+    __internal_isWebAuthnPlatformAuthenticatorSupported: PasskeySupport['isPlatformAuthenticatorSupported'] | undefined;
+};
+/** Creates an Electron passkey provider for clerk-js. */
+export declare function createPasskeys(options?: CreatePasskeysOptions): PasskeySupport;
+/**
+ * Ready-to-use passkey implementation for the `ClerkProvider` `passkeys` prop.
+ * Chooses renderer or native WebAuthn automatically per request.
+ *
+ * @example
+ * ```tsx
+ * import { ClerkProvider } from '@clerk/electron/react';
+ * import { passkeys } from '@clerk/electron/passkeys';
+ *
+ * <ClerkProvider publishableKey={publishableKey} passkeys={passkeys} />
+ * ```
+ */
+export declare const passkeys: PasskeySupport;
+/**
+ * Wires passkey support into a Clerk instance. Call before `clerk.load()`.
+ *
+ * @example
+ * ```ts
+ * import { Clerk } from '@clerk/clerk-js';
+ * import { createPasskeyProvider } from '@clerk/electron/passkeys';
+ *
+ * const clerk = new Clerk(publishableKey);
+ * createPasskeyProvider(clerk);
+ * await clerk.load();
+ * ```
+ */
+export declare function createPasskeyProvider(clerk: ClerkPasskeyHost, options?: CreatePasskeysOptions): PasskeySupport;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/passkeys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/passkeys/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,mDAAmD,EACnD,kDAAkD,EAClD,qDAAqD,EACrD,uDAAuD,EACxD,MAAM,qBAAqB,CAAC;AAI7B,OAAO,KAAK,EAAE,WAAW,EAAe,MAAM,qBAAqB,CAAC;AAGpE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,CACN,SAAS,EAAE,mDAAmD,KAC3D,OAAO,CAAC,gBAAgB,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACxF,GAAG,EAAE,CAAC,IAAI,EAAE;QACV,gBAAgB,EAAE,kDAAkD,CAAC;KACtE,KAAK,OAAO,CAAC,gBAAgB,CAAC,qDAAqD,CAAC,CAAC,CAAC;IACvF,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,mBAAmB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,gCAAgC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kCAAkC,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IACzE,+BAA+B,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACnE,8BAA8B,EAAE,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IAC1E,sCAAsC,EAAE,cAAc,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC;IAC1F,mDAAmD,EAAE,cAAc,CAAC,kCAAkC,CAAC,GAAG,SAAS,CAAC;CACrH,CAAC;AA6BF,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAwE9E;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,QAAQ,EAAE,cAAiC,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAU9G"}

package/dist/types/passkeys/preload.d.ts

@@ -0,0 +1,3 @@
+/** Exposes the native passkey bridge to the renderer. */
+export declare function setupPasskeysPreload(): void;
+//# sourceMappingURL=preload.d.ts.map

package/dist/types/passkeys/preload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preload.d.ts","sourceRoot":"","sources":["../../../src/passkeys/preload.ts"],"names":[],"mappings":"AAKA,yDAAyD;AACzD,wBAAgB,oBAAoB,IAAI,IAAI,CAc3C"}

package/dist/types/passkeys/renderer/native-bridge.d.ts

@@ -0,0 +1,6 @@
+import type { CredentialReturn, PublicKeyCredentialCreationOptionsWithoutExtensions, PublicKeyCredentialRequestOptionsWithoutExtensions, PublicKeyCredentialWithAuthenticatorAssertionResponse, PublicKeyCredentialWithAuthenticatorAttestationResponse } from '@clerk/shared/types';
+import type { PasskeyBridge } from '../../shared/types';
+export declare function getPasskeyBridge(): PasskeyBridge | undefined;
+export declare function nativeCreateCredential(publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions): Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAttestationResponse>>;
+export declare function nativeGetCredential(publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions): Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAssertionResponse>>;
+//# sourceMappingURL=native-bridge.d.ts.map

package/dist/types/passkeys/renderer/native-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-bridge.d.ts","sourceRoot":"","sources":["../../../../src/passkeys/renderer/native-bridge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,mDAAmD,EACnD,kDAAkD,EAClD,qDAAqD,EACrD,uDAAuD,EACxD,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASxD,wBAAgB,gBAAgB,IAAI,aAAa,GAAG,SAAS,CAE5D;AAQD,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,mDAAmD,GAC7D,OAAO,CAAC,gBAAgB,CAAC,uDAAuD,CAAC,CAAC,CAWpF;AAED,wBAAsB,mBAAmB,CACvC,gBAAgB,EAAE,kDAAkD,GACnE,OAAO,CAAC,gBAAgB,CAAC,qDAAqD,CAAC,CAAC,CAWlF"}

package/dist/types/passkeys/renderer/strategy.d.ts

@@ -0,0 +1,17 @@
+export type PasskeyMode = 'auto' | 'renderer' | 'native';
+export type PasskeyPath = 'renderer' | 'native' | 'unsupported';
+export type StrategyEnv = {
+    protocol: string;
+    hostname: string;
+    hasWebAuthn: boolean;
+    nativeAvailable: boolean;
+    platform: string;
+    electronMajor: number;
+};
+export declare function originSatisfiesRpId(env: Pick<StrategyEnv, 'protocol' | 'hostname'>, rpId: string): boolean;
+/**
+ * Prefer Chromium WebAuthn when the page origin can satisfy the RP ID.
+ * Local bundles and older macOS Electron builds use the native bridge when available.
+ */
+export declare function decidePath(rpId: string, mode: PasskeyMode, env: StrategyEnv): PasskeyPath;
+//# sourceMappingURL=strategy.d.ts.map

package/dist/types/passkeys/renderer/strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../../../src/passkeys/renderer/strategy.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AACzD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAK1G;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,GAAG,WAAW,CAgBzF"}

package/dist/types/passkeys/shared/errors.d.ts

@@ -0,0 +1,8 @@
+import { ClerkWebAuthnError } from '@clerk/shared/error';
+import type { PasskeyNativeErrorCode } from '../../shared/types';
+/** Maps native bridge errors to clerk-js WebAuthn errors. */
+export declare function mapPasskeyIpcError(error: {
+    code: PasskeyNativeErrorCode;
+    message: string;
+}, action: 'create' | 'get'): ClerkWebAuthnError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/types/passkeys/shared/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/passkeys/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAIjE,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACxD,MAAM,EAAE,QAAQ,GAAG,KAAK,GACvB,kBAAkB,CAuBpB"}

package/dist/types/passkeys/shared/serialization.d.ts

@@ -0,0 +1,11 @@
+import type { PublicKeyCredentialCreationOptionsWithoutExtensions, PublicKeyCredentialRequestOptionsWithoutExtensions, PublicKeyCredentialWithAuthenticatorAssertionResponse, PublicKeyCredentialWithAuthenticatorAttestationResponse } from '@clerk/shared/types';
+import type { AuthenticationResponseJSON, RegistrationResponseJSON, SerializedPublicKeyCredentialCreationOptions, SerializedPublicKeyCredentialRequestOptions } from '../../shared/types';
+export declare function serializeCreationOptions(publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions): SerializedPublicKeyCredentialCreationOptions;
+export declare function serializeRequestOptions(publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions): SerializedPublicKeyCredentialRequestOptions;
+export declare function deserializeCreationResponse(credential: RegistrationResponseJSON): PublicKeyCredentialWithAuthenticatorAttestationResponse & {
+    toJSON: () => RegistrationResponseJSON;
+};
+export declare function deserializeRequestResponse(credential: AuthenticationResponseJSON): PublicKeyCredentialWithAuthenticatorAssertionResponse & {
+    toJSON: () => AuthenticationResponseJSON;
+};
+//# sourceMappingURL=serialization.d.ts.map

package/dist/types/passkeys/shared/serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../../../src/passkeys/shared/serialization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mDAAmD,EACnD,kDAAkD,EAClD,qDAAqD,EACrD,uDAAuD,EACxD,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,0BAA0B,EAE1B,wBAAwB,EACxB,4CAA4C,EAC5C,2CAA2C,EAC5C,MAAM,oBAAoB,CAAC;AAe5B,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,mDAAmD,GAC7D,4CAA4C,CAmB9C;AAED,wBAAgB,uBAAuB,CACrC,gBAAgB,EAAE,kDAAkD,GACnE,2CAA2C,CAW7C;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,wBAAwB,GACnC,uDAAuD,GAAG;IAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;CAAE,CAatG;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,0BAA0B,GACrC,qDAAqD,GAAG;IAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;CAAE,CActG"}

package/dist/types/preload/index.d.ts

@@ -0,0 +1,11 @@
+import { setupPasskeysPreload } from '../passkeys/preload';
+import type { ExposeClerkBridgeOptions } from '../shared/types';
+export { setupPasskeysPreload };
+/**
+ * Exposes Clerk's Electron bridge from the preload script to the renderer.
+ *
+ * Call this from an Electron preload script. It publishes a narrow internal bridge used by
+ * `@clerk/electron/react` for token storage and OAuth transport.
+ */
+export declare function exposeClerkBridge(options?: ExposeClerkBridgeOptions): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/preload/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/preload/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAA8B,MAAM,iBAAiB,CAAC;AAE5F,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAqB1E"}

package/dist/types/react/create-clerk-instance.d.ts

@@ -0,0 +1,6 @@
+import { Clerk } from '@clerk/clerk-js';
+import type { PasskeySupport } from '../passkeys';
+type ClerkInstance = InstanceType<typeof Clerk>;
+export declare function createClerkInstance(publishableKey: string, passkeys?: PasskeySupport): ClerkInstance;
+export {};
+//# sourceMappingURL=create-clerk-instance.d.ts.map

package/dist/types/react/create-clerk-instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-clerk-instance.d.ts","sourceRoot":"","sources":["../../../src/react/create-clerk-instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAIxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,KAAK,aAAa,GAAG,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;AAYhD,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,aAAa,CAuCpG"}

package/dist/types/react/index.d.ts

@@ -0,0 +1,25 @@
+import type { ClerkProviderProps as ReactClerkProviderProps } from '@clerk/react';
+import type { ReactNode } from 'react';
+import type { PasskeySupport } from '../passkeys';
+export type ClerkProviderProps = Omit<ReactClerkProviderProps, 'Clerk' | 'children' | 'publishableKey' | 'standardBrowser' | 'ui' | '__internal_oauthTransport'> & {
+    children: ReactNode;
+    /**
+     * Your Clerk publishable key, available in the Clerk Dashboard.
+     */
+    publishableKey: string;
+    /**
+     * Enables passkey support. Pass the `passkeys` export from `@clerk/electron/passkeys`;
+     * when omitted, no passkey code is bundled or initialized.
+     *
+     * @example
+     * ```tsx
+     * import { passkeys } from '@clerk/electron/passkeys';
+     *
+     * <ClerkProvider publishableKey={publishableKey} passkeys={passkeys} />
+     * ```
+     */
+    passkeys?: PasskeySupport;
+};
+export declare function ClerkProvider({ children, publishableKey, passkeys, ...props }: ClerkProviderProps): JSX.Element;
+export * from '@clerk/react';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/react/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/react/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,IAAI,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAIlF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlD,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,uBAAuB,EACvB,OAAO,GAAG,UAAU,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,IAAI,GAAG,2BAA2B,CACjG,GAAG;IACF,QAAQ,EAAE,SAAS,CAAC;IACpB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAgDF,wBAAgB,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAiB/G;AAED,cAAc,cAAc,CAAC"}

package/dist/types/shared/ipc.d.ts

@@ -0,0 +1,15 @@
+export declare const TOKEN_CACHE_CHANNELS: {
+    readonly getToken: "clerk:token-cache:get";
+    readonly saveToken: "clerk:token-cache:save";
+    readonly clearToken: "clerk:token-cache:clear";
+};
+export declare const OAUTH_TRANSPORT_CHANNELS: {
+    readonly getRedirectUrl: "clerk:oauth-transport:get-redirect-url";
+    readonly open: "clerk:oauth-transport:open";
+};
+export declare const PASSKEY_CHANNELS: {
+    readonly create: "clerk:passkeys:create";
+    readonly get: "clerk:passkeys:get";
+    readonly capabilities: "clerk:passkeys:capabilities";
+};
+//# sourceMappingURL=ipc.d.ts.map

package/dist/types/shared/ipc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.d.ts","sourceRoot":"","sources":["../../../src/shared/ipc.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB;;;;CAIvB,CAAC;AAEX,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AAEX,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC"}

package/dist/types/shared/types.d.ts

@@ -0,0 +1,144 @@
+type Awaitable<T> = T | Promise<T>;
+export type TokenStorage = {
+    getItem: (key: string) => Awaitable<string | null>;
+    setItem: (key: string, value: string) => Awaitable<void>;
+    removeItem: (key: string) => Awaitable<void>;
+};
+export type CreateClerkBridgeOptions = {
+    /**
+     * Storage adapter used by the main process to persist Clerk tokens.
+     */
+    storage: TokenStorage;
+    /**
+     * Registers the custom scheme used to serve the Electron renderer from a stable origin.
+     */
+    renderer?: RendererSchemeOptions;
+    /**
+     * Registers the IPC handlers for native passkey ceremonies. Native support also requires
+     * the optional `@clerk/electron-passkeys` package and `exposeClerkBridge({ passkeys: true })`.
+     */
+    passkeys?: boolean;
+};
+export type ExposeClerkBridgeOptions = {
+    /**
+     * Exposes the native passkey bridge to the renderer. Requires `createClerkBridge({ passkeys: true })`.
+     */
+    passkeys?: boolean;
+};
+export type ClerkBridge = {
+    /**
+     * Removes IPC handlers and listeners registered by `createClerkBridge`.
+     */
+    cleanup: () => void;
+};
+export type RendererSchemeOptions = {
+    /**
+     * Custom scheme used for the renderer origin.
+     */
+    scheme: string;
+    /**
+     * Custom host used for the renderer origin.
+     */
+    host: string;
+};
+export type TokenCache = {
+    getToken: (key: string) => Promise<string | null>;
+    saveToken: (key: string, value: string) => Promise<void>;
+    clearToken: (key: string) => Promise<void>;
+};
+export type OAuthTransport = {
+    getRedirectUrl: () => Promise<string>;
+    open: (url: string) => Promise<{
+        callbackUrl: string;
+    }>;
+};
+type Base64UrlString = string;
+export type AuthenticatorTransport = 'ble' | 'cable' | 'hybrid' | 'internal' | 'nfc' | 'smart-card' | 'usb';
+export type PublicKeyCredentialDescriptorJSON = {
+    type: 'public-key';
+    id: Base64UrlString;
+    transports?: AuthenticatorTransport[];
+};
+export type SerializedPublicKeyCredentialCreationOptions = {
+    rp: {
+        id: string;
+        name: string;
+    };
+    user: {
+        id: Base64UrlString;
+        displayName: string;
+        name: string;
+    };
+    challenge: Base64UrlString;
+    pubKeyCredParams: {
+        type: 'public-key';
+        alg: number;
+    }[];
+    timeout?: number;
+    authenticatorSelection?: {
+        authenticatorAttachment?: 'cross-platform' | 'platform';
+        requireResidentKey?: boolean;
+        residentKey?: 'discouraged' | 'preferred' | 'required';
+        userVerification?: 'discouraged' | 'preferred' | 'required';
+    };
+    attestation?: 'direct' | 'enterprise' | 'indirect' | 'none';
+    excludeCredentials?: PublicKeyCredentialDescriptorJSON[];
+};
+export type SerializedPublicKeyCredentialRequestOptions = {
+    challenge: Base64UrlString;
+    rpId: string;
+    timeout?: number;
+    userVerification?: 'discouraged' | 'preferred' | 'required';
+    allowCredentials?: PublicKeyCredentialDescriptorJSON[];
+};
+export type RegistrationResponseJSON = {
+    id: Base64UrlString;
+    rawId: Base64UrlString;
+    response: {
+        clientDataJSON: Base64UrlString;
+        attestationObject: Base64UrlString;
+        transports?: AuthenticatorTransport[];
+    };
+    authenticatorAttachment?: 'cross-platform' | 'platform';
+    type: 'public-key';
+};
+export type AuthenticationResponseJSON = {
+    id: Base64UrlString;
+    rawId: Base64UrlString;
+    response: {
+        clientDataJSON: Base64UrlString;
+        authenticatorData: Base64UrlString;
+        signature: Base64UrlString;
+        userHandle?: Base64UrlString;
+    };
+    authenticatorAttachment?: 'cross-platform' | 'platform';
+    type: 'public-key';
+};
+export type PasskeyNativeErrorCode = 'cancelled' | 'invalid_rp' | 'not_supported' | 'timeout' | 'unknown';
+export type PasskeyIpcResult<T> = {
+    ok: true;
+    credential: T;
+} | {
+    ok: false;
+    error: {
+        code: PasskeyNativeErrorCode;
+        message: string;
+    };
+};
+export type PasskeyCapabilities = {
+    available: boolean;
+    platformAuthenticator: boolean;
+    securityKeys: boolean;
+};
+export type PasskeyBridge = {
+    create: (options: SerializedPublicKeyCredentialCreationOptions) => Promise<PasskeyIpcResult<RegistrationResponseJSON>>;
+    get: (options: SerializedPublicKeyCredentialRequestOptions) => Promise<PasskeyIpcResult<AuthenticationResponseJSON>>;
+    capabilities: () => Promise<PasskeyCapabilities>;
+    electronMajor: number;
+    platform: string;
+};
+export type SetupPasskeysMainReturn = {
+    cleanup: () => void;
+};
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/types.ts"],"names":[],"mappings":"AAAA,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,OAAO,EAAE,YAAY,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB;;OAEG;IACH,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD,CAAC;AAGF,KAAK,eAAe,GAAG,MAAM,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,GAAG,KAAK,CAAC;AAE5G,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,eAAe,CAAC;IACpB,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,4CAA4C,GAAG;IACzD,EAAE,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,IAAI,EAAE;QACJ,EAAE,EAAE,eAAe,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sBAAsB,CAAC,EAAE;QACvB,uBAAuB,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;QACxD,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,WAAW,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;QACvD,gBAAgB,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;KAC7D,CAAC;IACF,WAAW,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;IAC5D,kBAAkB,CAAC,EAAE,iCAAiC,EAAE,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;IAC5D,gBAAgB,CAAC,EAAE,iCAAiC,EAAE,CAAC;CACxD,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,eAAe,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE;QACR,cAAc,EAAE,eAAe,CAAC;QAChC,iBAAiB,EAAE,eAAe,CAAC;QACnC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;KACvC,CAAC;IACF,uBAAuB,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;IACxD,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,EAAE,EAAE,eAAe,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE;QACR,cAAc,EAAE,eAAe,CAAC;QAChC,iBAAiB,EAAE,eAAe,CAAC;QACnC,SAAS,EAAE,eAAe,CAAC;QAC3B,UAAU,CAAC,EAAE,eAAe,CAAC;KAC9B,CAAC;IACF,uBAAuB,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;IACxD,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAG1G,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,CAAC,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,CACN,OAAO,EAAE,4CAA4C,KAClD,OAAO,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACzD,GAAG,EAAE,CAAC,OAAO,EAAE,2CAA2C,KAAK,OAAO,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACrH,YAAY,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAAC"}

package/dist/types/storage/index.d.ts

@@ -0,0 +1,47 @@
+import type { TokenStorage } from '../shared/types';
+type StorageOptions = {
+    /**
+     * The name of the file (without extension) used to persist tokens.
+     *
+     * @default 'clerk-tokens'
+     */
+    name?: string;
+    /**
+     * The directory in which the token file is stored. Maps to `electron-store`'s `cwd` option.
+     * When omitted, the OS default user config directory is used.
+     */
+    path?: string;
+    /**
+     * When OS-level encryption is unavailable (e.g. a Linux machine without a keyring), tokens are
+     * not persisted by default, which signs the user out on the next app launch. Set this to `true`
+     * to instead persist tokens **unencrypted** in that scenario, keeping the user signed in across
+     * restarts at the cost of storing tokens in plaintext on disk.
+     *
+     * @default false
+     */
+    unencryptedFallback?: boolean;
+};
+/**
+ * Creates a secure {@link TokenStorage} adapter for the Electron main process.
+ *
+ * Tokens are persisted with `electron-store` and encrypted at rest using Electron's
+ * {@link safeStorage} API, which is backed by the OS keystore (Keychain on macOS, DPAPI on
+ * Windows, libsecret/kwallet on Linux). It uses Electron 42's async `safeStorage` API only when it
+ * reports itself available (which generally requires a code-signed app) and otherwise falls back to
+ * the synchronous API. Pass the result to `createClerkBridge({ storage: storage() })`.
+ *
+ * Behavior is secure by default: when OS encryption is unavailable the adapter does not persist
+ * tokens (the user will be signed out on restart) unless {@link StorageOptions.unencryptedFallback}
+ * is enabled. Undecryptable entries return `null`.
+ *
+ * @example
+ * ```ts
+ * import { createClerkBridge } from '@clerk/electron';
+ * import { storage } from '@clerk/electron/storage';
+ *
+ * createClerkBridge({ storage: storage({ name: 'my-app-tokens' }) });
+ * ```
+ */
+export declare function storage(options?: StorageOptions): TokenStorage;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/types/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,KAAK,cAAc,GAAG;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,CAAC;AA6EF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAwGlE"}