@cloudflare/workers-auth 0.5.5 → 0.6.0

package/dist/{keyring-preference-BgjU5DM9.d.mts → keyring-preference-CeP6MLyb.d.mts}

@@ -1,4 +1,4 @@
-import { l as OAuthConsentPages, F as FileFormat, b as OAuthFlowContext, C as CredentialStore, d as LoginOrRefreshResult, U as UserAuthConfig } from './file-format-B1KgHuUR.mjs';
+import { l as OAuthConsentPages, F as FileFormat, b as OAuthFlowContext, C as CredentialStore, d as LoginOrRefreshResult, U as UserAuthConfig } from './file-format-Dbmn5hhd.mjs';
 import { ApiCredentials, ComplianceConfig } from '@cloudflare/workers-utils';
 
 /** Minimal shape of the interactive `select` prompt's options for account selection. */
@@ -42,13 +42,29 @@ interface AuthContext {
  * rather than a fork of the factory.
  */
 interface CliDescriptor {
-    /** CLI name used in user-facing messaging and keyring install-dir scoping (e.g. `"wrangler"`). */
+    /**
+     * The CLI's invocation name, used for keyring install-dir scoping and in
+     * messaging that refers to the executable (e.g. `"wrangler"`, `"cf"`).
+     */
     cliName: string;
+    /**
+     * The CLI's branded name, used in prose addressed to the user (e.g.
+     * `"Wrangler"` for wrangler, `"cf"` for cf). Distinct from
+     * {@link CliDescriptor.cliName}, which names the executable.
+     */
+    displayName: string;
     /** Commands surfaced in auth guidance. */
     commands: {
         login: string;
         whoami: string;
         createProfile: string;
+        /**
+         * The command that restarts the OAuth 2.0 Device Authorization Grant,
+         * surfaced when a device code is denied, expires, or times out. Spelled
+         * out per CLI rather than derived from {@link CliDescriptor.commands.login}
+         * so the flag name stays the CLI's business.
+         */
+        deviceLogin: string;
     };
     /**
      * OS-keyring service identifier. Becomes the `-s` arg to macOS `security`,
@@ -110,6 +126,13 @@ interface CloudflareLoginProps {
     callbackHost?: string;
     callbackPort?: number;
     profile?: string;
+    /**
+     * When `true`, authenticate using the OAuth 2.0 Device Authorization Grant
+     * (RFC 8628) instead of the authorization-code-with-PKCE callback flow. The
+     * device flow does not start a local callback server, so `callbackHost` and
+     * `callbackPort` are ignored when this is set.
+     */
+    device?: boolean;
 }
 /** A Cloudflare CLI's auth layer, returned by {@link createCloudflareAuth}. */
 interface CloudflareAuth {